last executing test programs:

4m43.456951439s ago: executing program 0 (id=850):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0x81009431, &(0x7f0000000080)={0x2000000, 0x2000003})

4m42.806039968s ago: executing program 0 (id=857):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100)

4m42.586348217s ago: executing program 0 (id=859):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@map_normal}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@check_relaxed}, {@cruft}, {@overriderock}, {@check_strict}, {@gid={'gid', 0x3d, 0xee01}}, {@uid}, {@hide}, {@cruft}, {@unhide}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@map_normal}]}, 0x4, 0xa02, &(0x7f0000001880)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

4m42.012968892s ago: executing program 0 (id=861):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x479, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvTLvFWrQVERX8UUUjMdpSQOXgQY0mHjAx0YMeN20lSEFDayKkicUDnowx8W48+i940osxnky86t2QEMNF8LRmdmba3XZ3S9vdLrifT7LwfTOzfe+7b972zbzdBjCwJrN/koi9EfFHRIznxeYDJvP/blxfnr15fXk2iVrtnb+T+nH/XF+eLQ8tnzfWWIgkDrWod/HipbPVhYX5C0V5euncx9OLFy89f+Zc9fT86fnzx06ePHF85qUXj73QlTzHIi2iN9//+q1TXzblvy6PLpnstPPpWq3L1fXXPQ3xcB/bwdYMFf1VqY//8Rhq6L3xeOPz1cJnfWog0DO1Wq021n73Sg34H0uiuWzIw6Aof9GX17+troNf6dnso/+uvZpfAGV53yge+Z7h1TsGlXXXt900GRHvrfz7bfaI3tyHAABo8mM2/3kum+0sz2Zzj7X5RxoHGo67t1gbmoiI+yJiX0TcH+djf0Q8EFE/9sGIeGiL9TcsktSnmRvnP+nVbSd3C7L538vF2lbz/K+c/cXEUL10MS9EJfngzML80eI1ORKVPVl5pkMdP73++1ft9jXO/7JHVn85FyzacXV4T/Nz5qpL1e1n3Oza5YiDw63yT1ZXApKIeDgiDrb6AenmdZx59vtH2u3bPP8OurDQVPsu4pm8/1diXf6lpPP65PRdsTB/dLo8Kzb69bcrb7erf0f5d0HW/3e3PP9X859IGtdrF7dex5U/v2h7TTNZKYItnP8r1aXqSPJuPR4ptn1aXVq6MBMxkpzKG924/djac8tyeXyW/5HDrcf/vlh7JQ5FRHYSPxoRj0XE40XfPRERT0bE4Q75//LaUx+u3zZa5n8b9P/cav9nr+Zm/b8WjETzlrTFMVkwdPbnH5oqnVgLi/xvdn7/O1GPjhRbbuX9b2MrWgc7ff0AAADgTpBGxN5I0qnVOE2npvLP8O/Pl74zn5yfy78jMBGVtLzTNd5wP3SmuKzPy5cjIv9oQbn/eKT1+8bfDI3Wy1OzHy3M9TVzYKzN+M/8NdTv1gE95wtbMLiMfxhcHcd/ZffaAey+DeO/45jf09O2ALurxe//0X60A9h9reb//t4PDIZ149+yHwwQ9/9hcBn/MLi2Nf4PdL8dwK5aHI3NvyTfMSh/0jafvlkwHrHTFvYniMpt0YyeBZH2vIqR3p5aPQuSO7DNG4L+vScBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0038BAAD//8Jty5E=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m41.612539043s ago: executing program 0 (id=865):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c"])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1f,,\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

4m40.941562541s ago: executing program 0 (id=870):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)

4m40.561492754s ago: executing program 32 (id=870):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)

55.300173565s ago: executing program 1 (id=3832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40af, &(0x7f0000000080)={[{@size={'size', 0x3d, [0x6b]}}]})

55.002068864s ago: executing program 1 (id=3837):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @multicast2}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x8044, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})

54.850207845s ago: executing program 1 (id=3842):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f)

54.737209659s ago: executing program 1 (id=3845):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$eJzs3M9rHFUcAPDvTLJpY6qJtf5q/RGtYhFNmrZqDx5UFDxUEBTU45LEUptWaSLYEjD1UE8ignfx6L/gSS8ingSvepdCkV5sPa3Mzkyym2w22XQ3W93PB7b9vvmR974783bfzNvdAAbWZPZPErEvIn6PiPG82LzBZP7fjevLszevL88mUau99VdS3+7v68uz5ablfmONhUjiUIt6Fy9eOltdWJi/UJSnl859NL148dKzZ85VT8+fnj9/7OTJE8dnXnj+2HNdyXMs0iJ6/b2v3jj1RVP+6/Loksl2K5+s1bpcXX/d2RAP97EddGaoOF6Vev8fj6GGozcer322Wvi0Tw0EeqZWq9XGNl+9UgP+x5JoLuvyMCjKN/ry+rfVdfBLPRt99N+1l/MLoCzvG8UjXzO8esegsu76tpsmI+LdlX++yR7Rm/sQAABNfsjGP89ko53l2WzssTb+SOO+hu3uKuaGJiLi7ojYHxH3xPk4EBH3RtS3vT8iHuiw/oZJkvowc+P4J7264+S2IRv/vVjMbTWP/8rRX0wM1UsX80JUkvfPLMwfLZ6TI1HZk5Vn2tTx46u/fbnZusbxX/bI6i/HgkU7rg7vad5nrrpU3XnGza5djjg43Cr/ZHUmIImIByPiYKs/kG5dx5mnv3tos3Vb599GFyaaat9GPJUf/5VYl38paT8/Ob03FuaPTpdnxUa//Hrlzc3qX5f/3ugk/y7Ijv8dLc//1fwnksb52sXO67jyx+ebXtNMVoqgg/N/pbpUHUnerscjxbJPqktLF2YiRpJTeaMblx9b27csl9tn+R853Lr/74+1Z+JQRGQn8cMR8UhEPFocu8ci4vGIONwm/59feeKD9ctGy/xv5fzvgiz/uY6O/1owEs1L0hbbZMHQ2Z++b6p0Yi0s8r/Z/vXvRD06UizZzuvfxla0Dm71+QMAAID/gjQi9kWSTq3GaTo1lX+G/0A+9Z35+Pxc/h2Biaik5Z2u8Yb7oTPFZX1evhwR+UcLyvXHI63fN/56aLRenpr9cGGur5kDY5v0/8yfQ/1uHdBzvrAFg0v/h8HVtv9Xdq8dwO7b0P/b9vk9PW0LsLtavP+P9qMdwO5rNf73ez8wGNb1f9N+MEDc/4fBpf/D4NL/YSAtjsbWX5JvG5R/aYe7bxWMR+y8hRGx0uX2bDuISh8q3cUg0p5XMdLbU6tnQbKzNidxOzS+oe9s4Z02PxwOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwu/g3AAD//0C6yvY=")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

54.232214396s ago: executing program 1 (id=3855):
unshare(0x26020480)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_setup(0x7036, &(0x7f0000000040)={0x0, 0xeb40, 0x20, 0x1, 0xa1, 0x0, r0}, 0x0, 0x0)

53.66241369s ago: executing program 1 (id=3864):
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

53.170399962s ago: executing program 33 (id=3864):
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

3.724480469s ago: executing program 6 (id=4529):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mount_setattr(r0, 0x0, 0x8000, &(0x7f0000000100)={0x10000a, 0x74, 0x40000, {r0}}, 0x20)

3.546572032s ago: executing program 6 (id=4532):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="0005b600"], 0x0, 0x0})

2.109404093s ago: executing program 5 (id=4562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0)

1.97381818s ago: executing program 5 (id=4564):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000002f40)=""/4129)

1.886199315s ago: executing program 5 (id=4566):
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080))
syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.572972566s ago: executing program 2 (id=4571):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f00000001c0), 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x8, 0x0, 0xfffffffffffffffd}}, 0xd)

1.509886149s ago: executing program 2 (id=4572):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003240)=""/142, 0x8e}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/90, 0x5a}, {&(0x7f0000004480)=""/31, 0x1f}, {&(0x7f00000044c0)=""/4096, 0x1000}], 0x5}, 0x7}], 0x1, 0x2, 0x0)

1.329407169s ago: executing program 2 (id=4575):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$FS_IOC_GETFSLABEL(r0, 0x5411, &(0x7f0000000100))

1.193767405s ago: executing program 2 (id=4576):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x25}]}]}, 0x38}}, 0x4000)

1.124630188s ago: executing program 2 (id=4578):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000)

1.0053165s ago: executing program 4 (id=4581):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0x40000)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x22, 0x0, 0xa, 0x8, 0x0, 0x81})

940.350803ms ago: executing program 5 (id=4583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

918.37053ms ago: executing program 4 (id=4584):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a408000000000089900030014000200fc0200000000000000000000000000001400010020010000000000000023000000000000f37fad7f98290684fdcd308f00002400000000006ddb2b650ef8597a7289863e6caa84ed6eee514eb00e6c2833b9600a48225feffa63840b5efb4e18ee406748028304a61900390a8b26adac297b06c13f651c"], 0x44}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0)

878.316716ms ago: executing program 3 (id=4585):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/50, 0x32)
getdents(r0, 0xfffffffffffffffd, 0xbb)

778.163563ms ago: executing program 3 (id=4586):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unshare(0x2040400)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

777.978463ms ago: executing program 5 (id=4587):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c)
shutdown(r0, 0x0)

767.878354ms ago: executing program 4 (id=4588):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c0100001800210800000000000000001d01000008000e00", @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0)

730.243908ms ago: executing program 5 (id=4589):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

684.681148ms ago: executing program 3 (id=4590):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
kcmp(r1, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

662.062184ms ago: executing program 4 (id=4591):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r0, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003040), 0x0, 0x0)

525.498754ms ago: executing program 3 (id=4592):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

522.136114ms ago: executing program 4 (id=4593):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x10401, &(0x7f0000000280)={[{@shortname_mixed}, {@shortname_win95}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0xfc, 0x2bd, &(0x7f0000000740)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203)

443.13547ms ago: executing program 6 (id=4594):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
unshare(0x22020400)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0)

334.110833ms ago: executing program 3 (id=4595):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1810002, &(0x7f00000035c0)=ANY=[], 0x1, 0x1d4, &(0x7f0000000540)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)

284.356351ms ago: executing program 6 (id=4596):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20)
sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)

209.431463ms ago: executing program 2 (id=4597):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x80, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
mknod$loop(&(0x7f00000001c0)='./bus\x00', 0x6000, 0x1)

89.809613ms ago: executing program 6 (id=4598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)

66.177352ms ago: executing program 3 (id=4599):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000200)={[{@datacow}, {@rescan_uuid_tree}, {@compress_force}, {@space_cache_v2}, {@autodefrag}, {}, {@clear_cache}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x0, 0x146)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, 0x0)

3.60843ms ago: executing program 6 (id=4600):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x800802, &(0x7f0000000340)={[{@gid}, {@file_umask={'file_umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@type={'type', 0x3d, "d9b98afd"}}, {@part={'part', 0x3d, 0x6}}]}, 0x21, 0x30a, &(0x7f0000000740)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

0s ago: executing program 4 (id=4601):
r0 = fanotify_init(0x8, 0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1802)

kernel console output (not intermixed with test programs):

[  357.236061][ T5929] waltop 0003:172F:0500.0040: unknown main item tag 0x0
[  357.251116][ T5929] waltop 0003:172F:0500.0040: unknown main item tag 0x0
[  357.281698][ T5929] waltop 0003:172F:0500.0040: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0
[  357.315872][ T5929] usb 2-1: USB disconnect, device number 24
[  357.400994][T15527] fido_id[15527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  357.438572][T15531] loop3: detected capacity change from 0 to 1024
[  357.487665][T15531] hfsplus: bad catalog entry type
[  357.543705][   T13] hfsplus: b-tree write err: -5, ino 25
[  357.564548][   T13] hfsplus: b-tree write err: -5, ino 4
[  357.571855][   T13] hfsplus: b-tree write err: -5, ino 2
[  357.814893][ T5929] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  357.964907][ T5929] usb 3-1: Using ep0 maxpacket: 32
[  357.966099][T11586] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  357.975904][ T5929] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  358.014773][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.035582][ T5929] usb 3-1: Product: syz
[  358.042808][ T5929] usb 3-1: Manufacturer: syz
[  358.048222][ T5929] usb 3-1: SerialNumber: syz
[  358.059726][ T5929] usb 3-1: config 0 descriptor??
[  358.078054][ T5929] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  358.095601][ T5929] dvb-usb: bulk message failed: -22 (4/0)
[  358.102873][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  358.142917][ T5929] dvb-usb: bulk message failed: -22 (5/0)
[  358.146585][T11586] usb 4-1: Using ep0 maxpacket: 32
[  358.155444][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  358.173349][T11586] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  358.181894][T11586] usb 4-1: config 0 has no interface number 0
[  358.182779][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  358.204240][T11586] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  358.218238][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1028.tmp-b7:4' failed: Read-only file system
[  358.224180][T11586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.231989][T15562] loop1: detected capacity change from 0 to 4096
[  358.246085][ T5929] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  358.248858][T11586] usb 4-1: Product: syz
[  358.254104][ T5929] usb 3-1: media controller created
[  358.262399][T11586] usb 4-1: Manufacturer: syz
[  358.270231][T11586] usb 4-1: SerialNumber: syz
[  358.301884][T11586] usb 4-1: config 0 descriptor??
[  358.306830][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  358.323445][ T5818] udevd[5818]: symlink '../../loop4' '/dev/disk/by-diskseq/1028.tmp-b7:4' failed: Read-only file system
[  358.340466][ T5929] usb 3-1: selecting invalid altsetting 3
[  358.348307][ T5929] ttusb2: set interface to alts=3 failed
[  358.356628][T11586] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  358.378245][T11586] usb 4-1: selecting invalid altsetting 1
[  358.386566][T11586] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  358.406006][T11601] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  358.418179][T15562] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  358.421573][T11586] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  358.426019][ T5929] DVB: Unable to find symbol tda10086_attach()
[  358.426035][ T5929] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  358.429764][ T5929] dvb-usb: bulk message failed: -22 (4/0)
[  358.437249][T11586] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  358.452798][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  358.477324][T11586] usb 4-1: media controller created
[  358.491527][T11586] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  358.494750][T13753] udevd[13753]: symlink '../../loop1' '/dev/disk/by-diskseq/1031.tmp-b7:1' failed: Read-only file system
[  358.512827][ T5929] dvb-usb: bulk message failed: -22 (5/0)
[  358.518995][ T5929] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  358.521294][T13753] udevd[13753]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  358.531583][ T5929] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  358.543280][T13753] udevd[13753]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system
[  358.556139][ T5929] usb 3-1: USB disconnect, device number 26
[  358.570453][T11586] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  358.579554][T15562] ntfs3(loop1): Failed to load $Extend (-22).
[  358.587774][T11586] zl10353_read_register: readreg error (reg=127, ret==-71)
[  358.592238][T15562] ntfs3(loop1): Failed to initialize $Extend.
[  358.600815][T11586] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  358.613971][T11601] usb 6-1: Using ep0 maxpacket: 8
[  358.631435][T11601] usb 6-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  358.652623][T11601] usb 6-1: config 0 interface 0 has no altsetting 0
[  358.662739][T11601] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  358.666388][ T5929] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  358.677635][T11601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.715992][T11586] usb 4-1: USB disconnect, device number 33
[  358.726108][T11601] usb 6-1: config 0 descriptor??
[  358.826226][ T5844] udevd[5844]: symlink '../../loop1' '/dev/disk/by-diskseq/1031.tmp-b7:1' failed: Read-only file system
[  358.861483][ T5844] udevd[5844]: symlink '../../loop1' '/dev/disk/by-diskseq/1031.tmp-b7:1' failed: Read-only file system
[  358.905465][ T5844] udevd[5844]: symlink '../../loop1' '/dev/disk/by-diskseq/1032.tmp-b7:1' failed: Read-only file system
[  359.145749][T11601] logitech-hidpp-device 0003:046D:C086.0041: collection stack underflow
[  359.166509][T11601] logitech-hidpp-device 0003:046D:C086.0041: item 0 1 0 12 parsing failed
[  359.185764][T11601] logitech-hidpp-device 0003:046D:C086.0041: hidpp_probe:parse failed
[  359.221089][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1030.tmp-b7:3' failed: Read-only file system
[  359.229685][T15576] loop1: detected capacity change from 0 to 32768
[  359.232858][T11601] logitech-hidpp-device 0003:046D:C086.0041: probe with driver logitech-hidpp-device failed with error -22
[  359.269566][T15576] (syz.1.3697,15576,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  359.312542][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1028.tmp-b7:4' failed: Read-only file system
[  359.328608][T15576] (syz.1.3697,15576,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  359.428245][ T5923] usb 6-1: USB disconnect, device number 14
[  359.470455][T15576] JBD2: Ignoring recovery information on journal
[  359.555766][T15576] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  359.712720][T15591] loop4: detected capacity change from 0 to 4096
[  359.808549][T15591] ntfs3(loop4): failed to convert "0000" to iso8859-13
[  359.817078][T15591] ntfs3(loop4): failed to convert name for inode 1e.
[  359.824345][T15591] ntfs3(loop4): ino=1f, mi_enum_attr
[  359.831469][ T5836] ocfs2: Unmounting device (7,1) on (node local)
[  359.836168][T15591] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  360.124077][T15604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.785129][T15613] loop5: detected capacity change from 0 to 32768
[  360.853689][T15613] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  360.882887][T15613] XFS (loop5): Ending clean mount
[  360.922060][ T8119] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  361.392859][T15666] loop5: detected capacity change from 0 to 2048
[  361.436378][T15666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.679785][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.775968][T15683] loop1: detected capacity change from 0 to 4096
[  361.782798][T15687] loop5: detected capacity change from 0 to 256
[  361.812601][T15687] exfat: Deprecated parameter 'utf8'
[  361.832585][T15687] exfat: Deprecated parameter 'namecase'
[  361.848458][T15687] exfat: Deprecated parameter 'namecase'
[  361.879546][T15688] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  361.895727][T15687] exfat: Deprecated parameter 'utf8'
[  361.967011][T15683] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.'
[  361.972576][T15687] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  361.991437][T15683] Remounting filesystem read-only
[  362.049791][T15687] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  362.386718][T15679] loop4: detected capacity change from 0 to 40427
[  362.400469][T15679] F2FS-fs: heap/no_heap options were deprecated
[  362.416927][T15679] F2FS-fs (loop4): build fault injection rate: 23
[  362.437819][T15679] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  362.464924][T15679] F2FS-fs (loop4): invalid crc value
[  362.508082][T15679] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  362.686430][T15679] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  362.714556][T15679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  362.747922][T15679] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  362.764867][T15679] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  362.790802][T15679] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of page_symlink+0x27a/0x440
[  362.804881][T11601] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  362.832744][    C0] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of f2fs_write_end_io+0x673/0xff0
[  362.844621][    C0] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:10241045589465957861,blkaddr:4104]
[  362.861863][T11586] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  362.956749][T11601] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  362.970182][T11601] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  363.000593][T11601] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  363.023724][T11601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.032395][T11586] usb 6-1: Using ep0 maxpacket: 8
[  363.044262][T11586] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  363.066381][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  363.080720][T15709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  363.118523][T11601] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  363.126254][T11586] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  363.164927][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  363.195080][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  363.217889][T11586] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  363.243468][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  363.272342][T11586] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  363.279217][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1030.tmp-b7:3' failed: Read-only file system
[  363.343287][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  363.405133][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  363.421598][T11601] usb 2-1: USB disconnect, device number 25
[  363.429005][T11586] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  363.438156][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  363.450159][T11586] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  363.458344][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1046.tmp-b7:4' failed: Read-only file system
[  363.464493][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  363.487422][T11586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  363.513043][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1030.tmp-b7:3' failed: Read-only file system
[  363.532167][T11586] usb 6-1: string descriptor 0 read error: -22
[  363.552792][T11586] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  363.563183][T11586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.604728][T11586] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  363.649712][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1030.tmp-b7:3' failed: Read-only file system
[  363.748269][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1030.tmp-b7:3' failed: Read-only file system
[  363.776034][T11586] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  363.829262][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1030.tmp-b7:3' failed: Read-only file system
[  363.852493][T15745] loop3: detected capacity change from 0 to 512
[  363.862528][T15745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  363.871635][ T5923] usb 6-1: USB disconnect, device number 15
[  363.895662][T15745] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  363.922740][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1047.tmp-b7:3' failed: Read-only file system
[  363.933935][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  363.933957][    C0] EXT4-fs (loop3): initial error at time 1771351668: ext4_mb_generate_buddy:1315
[  363.933983][    C0] EXT4-fs (loop3): last error at time 1771351668: ext4_mb_generate_buddy:1315
[  363.947014][T15745] EXT4-fs (loop3): 1 truncate cleaned up
[  363.981844][T11586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.991840][T11586] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  363.997655][T15745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.003382][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  364.026447][T11586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.047370][T11586] usb 5-1: config 0 descriptor??
[  364.056755][ T5844] udevd[5844]: symlink '../../loop1' '/dev/disk/by-diskseq/1043.tmp-b7:1' failed: Read-only file system
[  364.103520][T15751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3771'.
[  364.121090][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.161720][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1047.tmp-b7:3' failed: Read-only file system
[  364.462330][T11586] greenasia 0003:0E8F:0012.0042: unknown main item tag 0x0
[  364.486854][T11586] greenasia 0003:0E8F:0012.0042: unknown main item tag 0x0
[  364.539332][T11586] greenasia 0003:0E8F:0012.0042: unknown main item tag 0x0
[  364.569098][T11586] greenasia 0003:0E8F:0012.0042: unknown main item tag 0x0
[  364.589470][T11586] greenasia 0003:0E8F:0012.0042: unknown main item tag 0x0
[  364.609072][T11586] greenasia 0003:0E8F:0012.0042: unknown main item tag 0x0
[  364.630848][T11586] greenasia 0003:0E8F:0012.0042: unknown main item tag 0x0
[  364.647428][ T5836] block device autoloading is deprecated and will be removed.
[  364.661973][T11586] greenasia 0003:0E8F:0012.0042: hidraw0: USB HID v0.07 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0
[  364.686961][T11586] greenasia 0003:0E8F:0012.0042: no inputs found
[  364.718012][T11586] usb 5-1: USB disconnect, device number 26
[  364.900339][T15783] fido_id[15783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  365.481332][T15816] loop3: detected capacity change from 0 to 4096
[  365.502372][T15816] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  365.534622][T15816] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  365.588926][T15825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  365.613674][T15816] syz.3.3802: attempt to access beyond end of device
[  365.613674][T15816] loop3: rw=8388608, sector=8246337208504, nr_sectors = 8 limit=4096
[  365.646539][T15816] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0)
[  365.740852][T15830] loop5: detected capacity change from 0 to 64
[  366.258735][T15841] loop4: detected capacity change from 0 to 2048
[  366.305979][T15841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  366.584006][T15852] loop1: detected capacity change from 0 to 1024
[  366.608669][T15848] loop4: detected capacity change from 0 to 1764
[  366.635162][T15852] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  366.668479][T15834] loop3: detected capacity change from 0 to 32768
[  366.695139][T15834] (syz.3.3810,15834,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  366.730978][T15834] (syz.3.3810,15834,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  366.748693][T15852] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.3819: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0)
[  366.808028][T15852] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  366.808329][T15852] EXT4-fs error (device loop1): ext4_quota_enable:7197: comm syz.1.3819: Bad quota inode: 3, type: 0
[  366.817419][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  366.817438][    C1] EXT4-fs (loop1): initial error at time 1771351671: ext4_ext_check_inode:521: inode 3
[  366.817469][    C1] EXT4-fs (loop1): last error at time 1771351671: ext4_ext_check_inode:521: inode 3
[  366.860085][T15834] JBD2: Ignoring recovery information on journal
[  366.860257][T15852] loop1: lost filesystem error report for type 5 error -117
[  366.871102][T15852] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  366.910604][T15852] EXT4-fs (loop1): mount failed
[  366.976635][T15834] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  367.171157][T15864] loop5: detected capacity change from 0 to 8192
[  367.235038][T15864] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  367.242446][T15864] UDF-fs: Scanning with blocksize 512 failed
[  367.258590][ T5826] ocfs2: Unmounting device (7,3) on (node local)
[  367.273068][T15873] netlink: 'syz.1.3827': attribute type 3 has an invalid length.
[  367.306121][T15864] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  367.323689][T15864] UDF-fs: Scanning with blocksize 1024 failed
[  367.377586][T15864] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  367.435075][T15864] UDF-fs: Scanning with blocksize 2048 failed
[  367.463024][T15864] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  367.502491][T15864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  367.544903][ T5929] IPVS: starting estimator thread 0...
[  367.644883][T15881] IPVS: using max 32 ests per chain, 76800 per kthread
[  368.059081][T15910] loop1: detected capacity change from 0 to 512
[  368.077433][T15910] EXT4-fs: Ignoring removed nomblk_io_submit option
[  368.115301][T15910] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  368.142321][T15910] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.3845: bad orphan inode 131083
[  368.190230][T15910] loop1: lost filesystem error report for type 5 error -117
[  368.195313][T15910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.243097][T15919] loop4: detected capacity change from 0 to 256
[  368.288718][T13758] udevd[13758]: symlink '../../loop5' '/dev/disk/by-diskseq/1063.tmp-b7:5' failed: Read-only file system
[  368.332302][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1059.tmp-b7:4' failed: Read-only file system
[  368.357983][T15910] overlayfs: upper fs needs to support d_type.
[  368.370164][ T5844] udevd[5844]: symlink '../../loop1' '/dev/disk/by-diskseq/1064.tmp-b7:1' failed: Read-only file system
[  368.386675][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system
[  368.400900][ T5844] udevd[5844]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  368.446885][T15919] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  368.462836][T13758] udevd[13758]: symlink '../../loop3' '/dev/disk/by-diskseq/1062.tmp-b7:3' failed: Read-only file system
[  368.489019][ T5836] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /721/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  368.512956][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1065.tmp-b7:4' failed: Read-only file system
[  368.514980][   T30] audit: type=1800 audit(1771351673.397:155): pid=15919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3850" name="file2" dev="loop4" ino=1048786 res=0 errno=0
[  368.532917][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system
[  368.607569][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1065.tmp-b7:4' failed: Read-only file system
[  368.620861][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system
[  368.854465][T15922] loop5: detected capacity change from 0 to 32768
[  368.884172][T15922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3851 (15922)
[  368.946715][T15922] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  368.969260][T15922] BTRFS info (device loop5): using crc32c checksum algorithm
[  368.997055][   T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  369.011871][T13582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.146689][T15922] BTRFS info (device loop5): enabling ssd optimizations
[  369.153676][T15922] BTRFS info (device loop5): turning on async discard
[  369.185193][   T24] usb 5-1: Using ep0 maxpacket: 32
[  369.203039][T15922] BTRFS info (device loop5): enabling free space tree
[  369.213832][ T1333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.229452][   T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  369.249668][   T24] usb 5-1: config 0 has no interface number 0
[  369.278242][   T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  369.295308][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.310856][   T24] usb 5-1: Product: syz
[  369.318065][   T24] usb 5-1: Manufacturer: syz
[  369.323795][   T24] usb 5-1: SerialNumber: syz
[  369.332825][   T24] usb 5-1: config 0 descriptor??
[  369.378670][   T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  369.408748][ T1333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.436803][ T8119] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  369.618967][   T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  369.656206][ T1333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.686261][   T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  369.882479][ T1333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.037421][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  370.054898][   T24] usb 5-1: USB disconnect, device number 27
[  370.076189][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  370.093112][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.105734][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.108614][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  370.124063][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.135909][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.143921][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.218888][   T24] quatech2 5-1:0.51: device disconnected
[  370.497558][T15993] set_capacity_and_notify: 1 callbacks suppressed
[  370.497577][T15993] loop5: detected capacity change from 0 to 64
[  370.577948][T15993] Trying to free block not in datazone
[  370.600977][T15993] minix_free_inode: bit 2 already cleared
[  370.641832][ T1333] bridge_slave_1: left allmulticast mode
[  370.685984][ T1333] bridge_slave_1: left promiscuous mode
[  370.729600][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.840294][ T1333] bridge_slave_0: left allmulticast mode
[  370.883115][ T1333] bridge_slave_0: left promiscuous mode
[  370.905117][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.959044][ T1333] batman_adv: batadv0: Interface deactivated: gretap1
[  371.205175][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  371.316548][T16030] loop3: detected capacity change from 0 to 64
[  371.342737][ T1333] batman_adv: batadv0: Removing interface: gretap1
[  371.358581][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.379906][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  371.404835][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.444348][   T24] usb 6-1: config 0 descriptor??
[  371.635813][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.652229][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.662972][ T1333] bond0 (unregistering): Released all slaves
[  371.819974][T16042] loop4: detected capacity change from 0 to 512
[  371.855656][ T1333] tipc: Disabling bearer <eth:hsr0>
[  371.863868][ T1333] tipc: Disabling bearer <udp:syz1>
[  371.875282][   T24] hid (null): bogus close delimiter
[  371.884515][T16042] EXT4-fs: Ignoring removed nomblk_io_submit option
[  371.889731][ T1333] tipc: Disabling bearer <eth:macvlan0>
[  371.896842][ T5923] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  371.906966][   T24] lg-g15 0003:046D:C222.0043: bogus close delimiter
[  371.913569][   T24] lg-g15 0003:046D:C222.0043: item 0 4 2 10 parsing failed
[  371.921913][   T24] lg-g15 0003:046D:C222.0043: probe with driver lg-g15 failed with error -22
[  371.949262][ T1333] tipc: Left network mode
[  371.977390][T16042] EXT4-fs (loop4): 1 truncate cleaned up
[  371.984686][T16042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.049018][T16042] EXT4-fs (loop4): Online resizing not supported with sparse_super2
[  372.096538][ T5923] usb 4-1: Using ep0 maxpacket: 16
[  372.113717][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.148857][   T24] usb 6-1: USB disconnect, device number 16
[  372.165806][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.188942][T15978] chnl_net:caif_netlink_parms(): no params data found
[  372.189618][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.198601][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  372.205116][ T5829] Bluetooth: hci4: command tx timeout
[  372.288618][ T5923] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  372.308016][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.395272][ T5923] usb 4-1: config 0 descriptor??
[  372.462313][T16063] netlink: 'syz.4.3898': attribute type 10 has an invalid length.
[  372.521985][T16066] netlink: 'syz.4.3898': attribute type 10 has an invalid length.
[  372.559757][ T1333] hsr_slave_0: left promiscuous mode
[  372.571016][ T1333] hsr_slave_1: left promiscuous mode
[  372.577393][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.586527][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.612728][ T1333] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.620645][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.661587][ T1333] veth1_macvtap: left promiscuous mode
[  372.672453][ T1333] veth0_macvtap: left promiscuous mode
[  372.680700][ T1333] veth1_vlan: left promiscuous mode
[  372.688821][ T1333] veth0_vlan: left promiscuous mode
[  372.852901][ T5923] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0044/input/input18
[  372.914226][ T5923] microsoft 0003:045E:07DA.0044: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  373.056900][ T5923] usb 4-1: USB disconnect, device number 34
[  373.232256][ T1333] team0 (unregistering): Port device team_slave_1 removed
[  373.254331][ T1333] team0 (unregistering): Port device team_slave_0 removed
[  373.471796][T15978] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.479516][T15978] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.489135][T15978] bridge_slave_0: entered allmulticast mode
[  373.497744][T15978] bridge_slave_0: entered promiscuous mode
[  373.517414][T16063] team0: Port device netdevsim0 added
[  373.529945][T16066] team0: Port device netdevsim0 removed
[  373.539137][T16066] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  373.550278][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3900'.
[  373.562441][T15978] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.588616][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1076.tmp-b7:4' failed: Read-only file system
[  373.595463][T15978] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.613687][T15978] bridge_slave_1: entered allmulticast mode
[  373.634209][T15978] bridge_slave_1: entered promiscuous mode
[  373.656629][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1072.tmp-b7:5' failed: Read-only file system
[  373.704981][ T5923] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  373.720866][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  373.759265][T16083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3904'.
[  373.759416][T15978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.805341][T15978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.826213][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1072.tmp-b7:5' failed: Read-only file system
[  373.895296][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  373.912440][ T5923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  373.924459][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  373.958507][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1072.tmp-b7:5' failed: Read-only file system
[  373.970080][ T5923] usb 3-1: config 0 has no interface number 0
[  373.982733][T15978] team0: Port device team_slave_0 added
[  374.001360][ T5923] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  374.013299][T15978] team0: Port device team_slave_1 added
[  374.019235][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.028461][ T5923] usb 3-1: Product: syz
[  374.032636][ T5923] usb 3-1: Manufacturer: syz
[  374.039537][ T5923] usb 3-1: SerialNumber: syz
[  374.048892][ T5923] usb 3-1: config 0 descriptor??
[  374.067299][ T5923] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  374.086538][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  374.113719][ T5923] usb 3-1: selecting invalid altsetting 1
[  374.123962][ T5923] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  374.141763][ T5923] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  374.176126][ T5923] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  374.180919][T15978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.185787][ T5923] usb 3-1: media controller created
[  374.224033][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  374.253366][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  374.269247][ T5829] Bluetooth: hci4: command tx timeout
[  374.324747][T15978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  374.369128][ T5818] udevd[5818]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  374.393263][T15978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  374.413039][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  374.452816][ T5923] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  374.464626][ T5923] zl10353_read_register: readreg error (reg=127, ret==-71)
[  374.472664][T15978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  374.483365][ T5923] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  374.524748][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  374.550902][T16079] loop4: detected capacity change from 0 to 32768
[  374.620082][ T5923] usb 3-1: USB disconnect, device number 27
[  374.644620][T16079] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  374.715397][T16079] XFS (loop4): Ending clean mount
[  374.732779][T16079] XFS (loop4): Quotacheck needed: Please wait.
[  374.782325][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1077.tmp-b7:4' failed: Read-only file system
[  374.807336][T15978] hsr_slave_0: entered promiscuous mode
[  374.845187][T16079] XFS (loop4): Quotacheck: Done.
[  374.851057][T15978] hsr_slave_1: entered promiscuous mode
[  374.890899][T15978] debugfs: 'hsr0' already exists in 'hsr'
[  374.917030][T15978] Cannot create hsr debugfs directory
[  375.025271][ T5835] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  375.784221][   T30] audit: type=1326 audit(1771351680.667:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.2.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  375.883818][   T30] audit: type=1326 audit(1771351680.697:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.2.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  375.884721][T15978] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  376.000108][   T30] audit: type=1326 audit(1771351680.717:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.2.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  376.032705][T15978] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  376.102021][T16161] loop4: detected capacity change from 0 to 164
[  376.105248][   T30] audit: type=1326 audit(1771351680.717:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.2.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  376.139933][T15978] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  376.204633][T15978] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  376.213356][   T30] audit: type=1326 audit(1771351680.717:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.2.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  376.304161][   T30] audit: type=1326 audit(1771351680.717:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.2.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  376.345221][ T5829] Bluetooth: hci4: command tx timeout
[  376.358408][T16170] loop4: detected capacity change from 0 to 64
[  376.445163][   T30] audit: type=1326 audit(1771351680.717:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16145 comm="syz.2.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  376.685659][T15978] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.799404][T15978] 8021q: adding VLAN 0 to HW filter on device team0
[  376.855767][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.862986][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.892779][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.899984][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.947175][T16149] loop5: detected capacity change from 0 to 32768
[  376.962507][T16192] syz.4.3937 (16192) used obsolete PPPIOCDETACH ioctl
[  376.994502][T16149] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  377.017487][T16149] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  377.088524][T16149] XFS (loop5): Ending clean mount
[  377.114230][T15978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  377.132260][T16149] XFS (loop5): Quotacheck needed: Please wait.
[  377.292211][T16149] XFS (loop5): Quotacheck: Done.
[  377.426523][ T8119] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  377.605565][T15978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.735115][T11586] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  377.889050][T11586] usb 5-1: Using ep0 maxpacket: 32
[  377.904404][T11586] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  377.920362][T11586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.931651][T11586] usb 5-1: Product: syz
[  377.938167][T11586] usb 5-1: Manufacturer: syz
[  377.942884][T11586] usb 5-1: SerialNumber: syz
[  377.956689][T11586] usb 5-1: config 0 descriptor??
[  377.974754][T11586] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  377.989742][T11586] dvb-usb: bulk message failed: -22 (4/0)
[  378.001083][T11586] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  378.013015][T11586] dvb-usb: bulk message failed: -22 (5/0)
[  378.019754][T11586] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  378.037106][T11586] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  378.048206][T11586] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  378.056956][T11586] usb 5-1: media controller created
[  378.094752][T15978] veth0_vlan: entered promiscuous mode
[  378.118325][T11586] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  378.162725][T15978] veth1_vlan: entered promiscuous mode
[  378.180637][T11586] usb 5-1: selecting invalid altsetting 3
[  378.208268][T11586] ttusb2: set interface to alts=3 failed
[  378.259192][T16252] tipc: Cannot configure node identity twice
[  378.295521][T16252] tipc: Cannot configure node identity twice
[  378.306135][T11586] DVB: Unable to find symbol tda10086_attach()
[  378.312316][T11586] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  378.315624][T15978] veth0_macvtap: entered promiscuous mode
[  378.337243][T11586] dvb-usb: bulk message failed: -22 (4/0)
[  378.346360][T11586] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  378.368532][T15978] veth1_macvtap: entered promiscuous mode
[  378.374983][T11586] dvb-usb: bulk message failed: -22 (5/0)
[  378.381033][T11586] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  378.431106][ T5829] Bluetooth: hci4: command tx timeout
[  378.439361][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  378.446061][T15978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.446422][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  378.469899][T11586] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  378.485840][T11586] usb 5-1: USB disconnect, device number 28
[  378.533485][T15978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.589662][T11586] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  378.600914][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1084.tmp-b7:5' failed: Read-only file system
[  378.603913][ T1333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.661282][ T1333] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.663006][T16260] loop5: detected capacity change from 0 to 1024
[  378.690831][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  378.697266][ T1333] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.736842][T16260] hfsplus: b-tree write err: -5, ino 2
[  378.749627][ T1333] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.777229][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1085.tmp-b7:5' failed: Read-only file system
[  378.794130][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  378.839477][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  378.866922][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:5' failed: Read-only file system
[  378.897685][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1082.tmp-b7:4' failed: Read-only file system
[  378.915544][   T49] hfsplus: b-tree write err: -5, ino 25
[  378.933965][   T49] hfsplus: b-tree write err: -5, ino 4
[  378.952791][   T49] hfsplus: b-tree write err: -5, ino 2
[  378.983385][   T49] hfsplus: b-tree write err: -5, ino 26
[  379.015608][ T3583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.023443][ T3583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.090551][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1085.tmp-b7:5' failed: Read-only file system
[  379.096706][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1074.tmp-b7:3' failed: Read-only file system
[  379.139132][T16273] loop5: detected capacity change from 0 to 1024
[  379.188608][T16273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.204128][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.206943][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1085.tmp-b7:5' failed: Read-only file system
[  379.269791][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.367328][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.565550][T16282] program syz.5.3962 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  379.918359][T16267] loop4: detected capacity change from 0 to 40427
[  379.931965][T16296] vlan2: entered promiscuous mode
[  379.938607][T16296] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  379.961577][T16267] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  379.989531][T16267] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  380.023494][T16267] F2FS-fs (loop4): invalid crc_offset: 33558524
[  380.241626][T16267] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  380.276566][T16267] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  380.295648][T16267] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  380.973285][T16343] loop3: detected capacity change from 0 to 512
[  380.985995][T16343] EXT4-fs: Ignoring removed orlov option
[  381.096125][T16343] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  381.155045][T16343] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  381.186820][T16343] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.3992: Failed to acquire dquot type 1
[  381.214899][T16343] loop3: lost filesystem error report for type 5 error -117
[  381.215450][T16343] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  381.232876][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  381.232895][    C0] EXT4-fs (loop3): last error at time 1771351686: ext4_acquire_dquot:7003
[  381.265864][T16343] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  381.302648][T16343] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.3992: Failed to acquire dquot type 1
[  381.355313][T16343] loop3: lost filesystem error report for type 5 error -117
[  381.366328][T16343] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3992: bg 0: block 248: padding at end of block bitmap is not set
[  381.431807][T16343] loop3: lost filesystem error report for type 5 error -117
[  381.432227][T16343] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  381.475735][T16343] loop3: lost filesystem error report for type 5 error -117
[  381.476479][T16343] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  381.525355][T16343] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  381.545752][T16343] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.3992: Failed to acquire dquot type 1
[  381.569105][T16343] loop3: lost filesystem error report for type 5 error -117
[  381.574993][T16343] EXT4-fs (loop3): 1 orphan inode deleted
[  381.610290][T16343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.655539][T16343] ext4 filesystem being mounted at /813/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.752672][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.766568][T16347] loop4: detected capacity change from 0 to 32768
[  381.806729][T16347] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3983 (16347)
[  381.858972][T16347] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  381.912301][T16347] BTRFS info (device loop4): using blake2b checksum algorithm
[  381.996596][T16359] loop6: detected capacity change from 0 to 32768
[  382.060207][T16347] BTRFS info (device loop4): enabling ssd optimizations
[  382.071876][T16359] JBD2: Ignoring recovery information on journal
[  382.108638][T16347] BTRFS info (device loop4): turning on async discard
[  382.142581][T16347] BTRFS info (device loop4): enabling free space tree
[  382.190003][T16359] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  382.200506][T16357] loop5: detected capacity change from 0 to 32768
[  382.283912][T16357] find_entry called with index = 0
[  382.322342][T16357] find_entry called with index = 0
[  382.365704][T16357] read_mapping_page failed!
[  382.385296][T16357] ERROR: (device loop5): txCommit: 
[  382.385296][T16357] 
[  382.463387][ T5835] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  382.490251][T15978] ocfs2: Unmounting device (7,6) on (node local)
[  383.038260][T16409] loop6: detected capacity change from 0 to 1024
[  383.096333][T16409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  383.125115][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4015'.
[  383.220032][T15978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.489330][T16429] loop5: detected capacity change from 0 to 4096
[  383.502321][T16429] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  383.533952][T16431] bond1: option ad_user_port_key: invalid value (2047)
[  383.541878][T16431] bond1: option ad_user_port_key: allowed values 0 - 1023
[  383.567265][T16429] ntfs3(loop5): ino=3, mi_enum_attr
[  383.578908][T16431] bond1 (unregistering): Released all slaves
[  383.672239][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1101.tmp-b7:5' failed: Read-only file system
[  383.712238][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  383.771356][T13753] udevd[13753]: symlink '../../loop6' '/dev/disk/by-diskseq/1100.tmp-b7:6' failed: Read-only file system
[  383.793642][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:5' failed: Read-only file system
[  383.901330][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1098.tmp-b7:4' failed: Read-only file system
[  383.962960][T16439] loop4: detected capacity change from 0 to 1024
[  383.982180][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1101.tmp-b7:5' failed: Read-only file system
[  383.983325][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4025'.
[  384.044735][T16439] hfsplus: b-tree write err: -5, ino 2
[  384.047851][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  384.084920][   T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  384.098652][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:5' failed: Read-only file system
[  384.137553][ T3020] hfsplus: b-tree write err: -5, ino 25
[  384.137731][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1102.tmp-b7:4' failed: Read-only file system
[  384.143211][ T3020] hfsplus: b-tree write err: -5, ino 4
[  384.193589][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  384.196359][ T3020] hfsplus: b-tree write err: -5, ino 2
[  384.236326][   T29] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  384.247869][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.261966][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.278811][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.296561][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.307588][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.312379][T16448] loop4: detected capacity change from 0 to 64
[  384.324819][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.325864][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.352130][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.399455][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.413340][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.433329][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.454339][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.481342][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.495676][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.540855][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.559951][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.577494][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.598655][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.613904][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.625981][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.637606][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.646354][   T29] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.655427][   T29] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.672404][   T29] usb 7-1: config 0 interface 0 has no altsetting 0
[  384.685877][   T29] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  384.705127][   T29] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  384.717938][   T29] usb 7-1: Product: syz
[  384.737186][   T29] usb 7-1: Manufacturer: syz
[  384.778188][   T29] usb 7-1: SerialNumber: syz
[  384.786048][   T29] usb 7-1: config 0 descriptor??
[  384.835173][   T29] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  384.947449][T16469] loop5: detected capacity change from 0 to 128
[  384.984269][T16469] EXT4-fs (loop5): Test dummy encryption mode enabled
[  385.027261][   T10] usb 7-1: USB disconnect, device number 2
[  385.067713][   T10] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  385.105987][T16469] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  385.173714][T16469] ext4 filesystem being mounted at /635/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  385.313701][   T30] audit: type=1800 audit(1771351690.197:163): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4037" name="file1" dev="loop5" ino=12 res=0 errno=0
[  385.833421][ T8119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  386.129758][T16477] loop4: detected capacity change from 0 to 40427
[  386.186209][T16477] F2FS-fs (loop4): build fault injection rate: 771
[  386.226907][T16477] F2FS-fs (loop4): invalid crc value
[  386.434929][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  386.549409][T16477] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  386.575835][T16477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  386.817804][ T5835] syz-executor: attempt to access beyond end of device
[  386.817804][ T5835] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  386.874037][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  386.874067][ T5835] Tainted: [L]=SOFTLOCKUP
[  386.874075][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  386.874085][ T5835] Call Trace:
[  386.874093][ T5835]  <TASK>
[  386.874102][ T5835]  dump_stack_lvl+0xe8/0x150
[  386.874137][ T5835]  f2fs_handle_critical_error+0x37c/0x540
[  386.874168][ T5835]  f2fs_write_end_io+0xcdb/0xff0
[  386.874205][ T5835]  __submit_merged_bio+0x256/0x700
[  386.874236][ T5835]  __submit_merged_write_cond+0x3c9/0x4e0
[  386.874269][ T5835]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  386.874317][ T5835]  f2fs_write_data_pages+0x2975/0x35e0
[  386.874369][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  386.874401][ T5835]  ? css_rstat_updated+0x23a/0x530
[  386.874446][ T5835]  ? rcu_is_watching+0x15/0xb0
[  386.874471][ T5835]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  386.874499][ T5835]  ? __lock_acquire+0x6b5/0x2cf0
[  386.874536][ T5835]  ? __lock_acquire+0x6b5/0x2cf0
[  386.874563][ T5835]  ? do_raw_spin_lock+0x12b/0x2f0
[  386.874593][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  386.874613][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  386.874632][ T5835]  do_writepages+0x32e/0x550
[  386.874667][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  386.874690][ T5835]  filemap_fdatawrite+0x1e9/0x2f0
[  386.874727][ T5835]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  386.874792][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  386.874814][ T5835]  f2fs_sync_dirty_inodes+0x30e/0x860
[  386.874845][ T5835]  f2fs_write_checkpoint+0x9df/0x26a0
[  386.874896][ T5835]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  386.874952][ T5835]  ? kfree+0x1c1/0x630
[  386.874969][ T5835]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  386.874998][ T5835]  kill_f2fs_super+0x314/0x720
[  386.875023][ T5835]  ? __pfx_kill_f2fs_super+0x10/0x10
[  386.875054][ T5835]  ? lockdep_hardirqs_on+0x7a/0x110
[  386.875091][ T5835]  deactivate_locked_super+0xbc/0x130
[  386.875121][ T5835]  cleanup_mnt+0x437/0x4d0
[  386.875140][ T5835]  ? _raw_spin_unlock_irq+0x23/0x50
[  386.875165][ T5835]  task_work_run+0x1d9/0x270
[  386.875189][ T5835]  ? __pfx_task_work_run+0x10/0x10
[  386.875219][ T5835]  exit_to_user_mode_loop+0xed/0x480
[  386.875240][ T5835]  ? rcu_is_watching+0x15/0xb0
[  386.875268][ T5835]  do_syscall_64+0x32d/0xf80
[  386.875291][ T5835]  ? trace_irq_disable+0x3b/0x150
[  386.875307][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.875326][ T5835]  ? clear_bhb_loop+0x40/0x90
[  386.875348][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.875366][ T5835] RIP: 0033:0x7f457d39d897
[  386.875385][ T5835] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  386.875400][ T5835] RSP: 002b:00007ffd6aa89af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  386.875420][ T5835] RAX: 0000000000000000 RBX: 00007f457d431ef0 RCX: 00007f457d39d897
[  386.875433][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6aa89bb0
[  386.875444][ T5835] RBP: 00007ffd6aa89bb0 R08: 00007ffd6aa8abb0 R09: 00000000ffffffff
[  386.875457][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6aa8ac40
[  386.875468][ T5835] R13: 00007f457d431ef0 R14: 000000000005e6b2 R15: 00007ffd6aa8ac80
[  386.875498][ T5835]  </TASK>
[  387.489243][ T5835] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  387.953183][   T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  387.964381][   T10] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.974993][   T10] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  387.993013][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  387.994891][   T29] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  387.999987][   T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  388.016891][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.035826][   T10] usb 7-1: config 0 descriptor??
[  388.243993][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.275374][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.315130][   T29] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  388.324210][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.374660][   T29] usb 6-1: config 0 descriptor??
[  388.475305][   T10] apple 0003:05AC:027D.0045: hidraw0: USB HID v0.04 Device [HID 05ac:027d] on usb-dummy_hcd.6-1/input0
[  388.583409][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'.
[  388.695278][ T5923] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  388.752550][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1093.tmp-b7:3' failed: Read-only file system
[  388.771818][ T5925] usb 7-1: USB disconnect, device number 3
[  388.801429][ T7319] udevd[7319]: symlink '../../loop4' '/dev/disk/by-diskseq/1110.tmp-b7:4' failed: Read-only file system
[  388.813753][   T10] kernel read not supported for file /vga_arbiter (pid: 10 comm: kworker/0:1)
[  388.818433][   T29] hid-steam 0003:28DE:1142.0046: unknown main item tag 0x0
[  388.842738][T16535] loop3: detected capacity change from 0 to 512
[  388.866772][   T29] hid-steam 0003:28DE:1142.0046: unknown main item tag 0x0
[  388.874026][   T29] hid-steam 0003:28DE:1142.0046: unknown main item tag 0x0
[  388.918641][ T5923] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  388.919035][T16535] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  388.950454][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1111.tmp-b7:3' failed: Read-only file system
[  388.963317][T16535] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  388.971671][ T5923] usb 3-1: config 0 has no interface number 0
[  388.978367][   T29] hid-steam 0003:28DE:1142.0046: unknown main item tag 0x0
[  388.994936][ T5923] usb 3-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30
[  388.996584][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1110.tmp-b7:4' failed: Read-only file system
[  389.015138][   T29] hid-steam 0003:28DE:1142.0046: unknown main item tag 0x0
[  389.023460][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system
[  389.037172][T16543] sd 0:0:1:0: device reset
[  389.041931][T16535] EXT4-fs (loop3): 1 truncate cleaned up
[  389.068729][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1111.tmp-b7:3' failed: Read-only file system
[  389.071024][ T5923] usb 3-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102
[  389.084044][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-label/\x86\x5b.tmp-b7:3' failed: Read-only file system
[  389.107795][   T29] hid-steam 0003:28DE:1142.0046: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[  389.109214][T16535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.158349][   T29] usb 6-1: USB disconnect, device number 17
[  389.194371][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1110.tmp-b7:4' failed: Read-only file system
[  389.227554][ T5923] usb 3-1: config 0 interface 48 has no altsetting 0
[  389.244529][ T5923] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  389.264845][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.272855][ T5923] usb 3-1: Product: syz
[  389.281573][T16535] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 4: comm syz.3.4065: lblock 0 mapped to illegal pblock 4 (length 1)
[  389.312674][ T5923] usb 3-1: Manufacturer: syz
[  389.317617][ T5923] usb 3-1: SerialNumber: syz
[  389.330261][T16535] EXT4-fs (loop3): Remounting filesystem read-only
[  389.336432][ T5923] usb 3-1: config 0 descriptor??
[  389.347200][T16547] loop4: detected capacity change from 0 to 512
[  389.370897][T16544] fido_id[16544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  389.372462][T16547] EXT4-fs: Ignoring removed mblk_io_submit option
[  389.428497][T13758] udevd[13758]: symlink '../../loop4' '/dev/disk/by-diskseq/1112.tmp-b7:4' failed: Read-only file system
[  389.459080][ T5818] udevd[5818]: symlink '../../loop6' '/dev/disk/by-diskseq/1100.tmp-b7:6' failed: Read-only file system
[  389.477908][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.496627][T16547] EXT4-fs (loop4): orphan cleanup on readonly fs
[  389.542306][T16547] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  389.565323][T16547] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.4067: attempt to clear invalid blocks 2 len 1
[  389.593012][ T5923] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  389.603555][T16547] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  389.605354][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  389.620976][    C0] EXT4-fs (loop4): initial error at time 1771351694: ext4_clear_blocks:876: inode 13
[  389.630502][    C0] EXT4-fs (loop4): last error at time 1771351694: ext4_clear_blocks:876: inode 13
[  389.659907][T16547] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  389.725332][T16547] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4067: invalid indirect mapped block 1819239214 (level 0)
[  389.764885][T11601] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  389.789280][T16547] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  389.789879][T16547] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4067: invalid indirect mapped block 1819239214 (level 1)
[  389.865389][T16547] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  389.871849][T16547] EXT4-fs (loop4): 1 truncate cleaned up
[  389.916735][T11601] usb 7-1: Using ep0 maxpacket: 16
[  389.932204][T16547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  389.959656][T11601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.980841][T11601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.987840][ T5923] gspca_stk1135: reg_w 0x0 err -71
[  390.004417][T11601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  390.007880][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.035359][ T5923] gspca_stk1135: Sensor write failed
[  390.040915][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.053953][ T5923] gspca_stk1135: Sensor write failed
[  390.057392][T11601] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  390.091247][T11601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.100171][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.121545][ T5923] gspca_stk1135: Sensor read failed
[  390.129035][T11601] usb 7-1: config 0 descriptor??
[  390.148044][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.154641][T16547] EXT4-fs: Ignoring sb option on remount
[  390.154737][T16547] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  390.181036][ T5923] gspca_stk1135: Sensor read failed
[  390.189500][T16547] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  390.199380][ T5923] gspca_stk1135: Detected sensor type unknown (0x0)
[  390.224924][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.241564][ T5923] gspca_stk1135: Sensor read failed
[  390.248289][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.267584][ T5923] gspca_stk1135: Sensor read failed
[  390.272884][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.282711][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.285483][ T5923] gspca_stk1135: Sensor write failed
[  390.301506][T16575] loop3: detected capacity change from 0 to 4096
[  390.317369][T16575] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  390.328529][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  390.334975][ T5923] gspca_stk1135: Sensor write failed
[  390.341329][ T5923] stk1135 3-1:0.48: probe with driver stk1135 failed with error -71
[  390.426725][ T5923] usb 3-1: USB disconnect, device number 28
[  390.471816][T16575] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  390.507576][T16575] ntfs3(loop3): ino=19, mi_enum_attr
[  390.563342][T16575] ntfs3(loop3): failed to convert "c46c" to cp775
[  390.607439][T11601] microsoft 0003:045E:07DA.0047: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  390.618982][T16575] ntfs3(loop3): ino=20, mi_enum_attr
[  390.631787][T11601] microsoft 0003:045E:07DA.0047: no inputs found
[  390.665766][T11601] microsoft 0003:045E:07DA.0047: could not initialize ff, continuing anyway
[  390.815221][T11601] usb 7-1: USB disconnect, device number 4
[  390.938664][T16569] loop5: detected capacity change from 0 to 32768
[  391.001048][T16569] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  391.001048][T16569] 
[  391.287871][   T30] audit: type=1326 audit(1771351696.177:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  391.323593][   T30] audit: type=1326 audit(1771351696.177:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  391.444945][   T30] audit: type=1326 audit(1771351696.197:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  391.539222][   T30] audit: type=1326 audit(1771351696.247:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  391.585946][T16611] loop4: detected capacity change from 0 to 4096
[  391.618775][   T30] audit: type=1326 audit(1771351696.247:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  392.103491][T16640] loop6: detected capacity change from 0 to 2048
[  392.174039][T16640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.386182][T15978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.402616][T16657] loop5: detected capacity change from 0 to 1024
[  392.617555][ T3583] hfsplus: b-tree write err: -5, ino 25
[  392.623555][ T3583] hfsplus: b-tree write err: -5, ino 4
[  392.647874][ T3583] hfsplus: b-tree write err: -5, ino 2
[  392.674445][ T3583] hfsplus: b-tree write err: -5, ino 20
[  392.681760][T16669] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  392.700701][T16672] tipc: Started in network mode
[  392.751568][T16672] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  392.762632][T16672] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  392.822050][T16676] loop5: detected capacity change from 0 to 64
[  392.941973][T16679] nbd: must specify a size in bytes for the device
[  393.763681][T16721] loop5: detected capacity change from 0 to 256
[  393.779088][ T5844] udevd[5844]: symlink '../../loop6' '/dev/disk/by-diskseq/1123.tmp-b7:6' failed: Read-only file system
[  393.780138][T16724] netlink: 'syz.6.4130': attribute type 5 has an invalid length.
[  393.866578][T16721] FAT-fs (loop5): Directory bread(block 64) failed
[  393.874998][T11600] tipc: Node number set to 10136234
[  393.881655][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1127.tmp-b7:5' failed: Read-only file system
[  393.903495][T16721] FAT-fs (loop5): Directory bread(block 65) failed
[  393.934465][T16721] FAT-fs (loop5): Directory bread(block 66) failed
[  393.947439][T13758] udevd[13758]: symlink '../../loop6' '/dev/disk/by-diskseq/1123.tmp-b7:6' failed: Read-only file system
[  393.967089][T16721] FAT-fs (loop5): Directory bread(block 67) failed
[  393.969673][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1120.tmp-b7:4' failed: Read-only file system
[  393.973693][T16721] FAT-fs (loop5): Directory bread(block 68) failed
[  394.012294][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1127.tmp-b7:5' failed: Read-only file system
[  394.055166][T16721] FAT-fs (loop5): Directory bread(block 69) failed
[  394.063202][T16721] FAT-fs (loop5): Directory bread(block 70) failed
[  394.092206][T16721] FAT-fs (loop5): Directory bread(block 71) failed
[  394.100846][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1120.tmp-b7:4' failed: Read-only file system
[  394.113134][T16721] FAT-fs (loop5): Directory bread(block 72) failed
[  394.135023][T16721] FAT-fs (loop5): Directory bread(block 73) failed
[  394.171538][ T5844] udevd[5844]: symlink '../../loop6' '/dev/disk/by-diskseq/1123.tmp-b7:6' failed: Read-only file system
[  394.226265][T13753] udevd[13753]: symlink '../../loop4' '/dev/disk/by-diskseq/1120.tmp-b7:4' failed: Read-only file system
[  394.336266][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1127.tmp-b7:5' failed: Read-only file system
[  394.364206][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1127.tmp-b7:5' failed: Read-only file system
[  394.801514][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'.
[  395.230662][T16746] loop6: detected capacity change from 0 to 40427
[  395.241470][T16746] F2FS-fs: heap/no_heap options were deprecated
[  395.301907][T16746] F2FS-fs (loop6): Image doesn't support compression
[  395.316045][T16746] F2FS-fs (loop6): invalid crc value
[  395.466683][T16746] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  395.507618][T16746] F2FS-fs (loop6): Start checkpoint disabled!
[  395.514809][T16746] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  395.527393][T16764] loop5: detected capacity change from 0 to 32768
[  395.555534][T16746] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  395.600929][T16764] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  395.695825][   T30] audit: type=1800 audit(1771351700.577:169): pid=16746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4141" name="/" dev="loop6" ino=8 res=0 errno=0
[  395.856542][ T3020] kworker/u8:9: attempt to access beyond end of device
[  395.856542][ T3020] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  395.927017][T16764] XFS (loop5): Ending clean mount
[  395.939511][ T3020] CPU: 1 UID: 0 PID: 3020 Comm: kworker/u8:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  395.939538][ T3020] Tainted: [L]=SOFTLOCKUP
[  395.939545][ T3020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  395.939555][ T3020] Workqueue: writeback wb_workfn (flush-7:6)
[  395.939584][ T3020] Call Trace:
[  395.939592][ T3020]  <TASK>
[  395.939599][ T3020]  dump_stack_lvl+0xe8/0x150
[  395.939627][ T3020]  f2fs_handle_critical_error+0x37c/0x540
[  395.939658][ T3020]  f2fs_write_end_io+0xcdb/0xff0
[  395.939694][ T3020]  __submit_merged_bio+0x256/0x700
[  395.939726][ T3020]  __submit_merged_write_cond+0x3c9/0x4e0
[  395.939759][ T3020]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  395.939807][ T3020]  f2fs_write_data_pages+0x2975/0x35e0
[  395.939874][ T3020]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  395.939907][ T3020]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  395.939962][ T3020]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  395.940008][ T3020]  ? __lock_acquire+0x6b5/0x2cf0
[  395.940041][ T3020]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[  395.940063][ T3020]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  395.940081][ T3020]  do_writepages+0x32e/0x550
[  395.940110][ T3020]  ? reacquire_held_locks+0x104/0x190
[  395.940132][ T3020]  ? writeback_sb_inodes+0x477/0x1a20
[  395.940164][ T3020]  __writeback_single_inode+0x133/0x11a0
[  395.940188][ T3020]  ? do_raw_spin_unlock+0xf5/0x210
[  395.940211][ T3020]  writeback_sb_inodes+0x992/0x1a20
[  395.940253][ T3020]  ? __lock_acquire+0x6b5/0x2cf0
[  395.940283][ T3020]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  395.940303][ T3020]  ? do_raw_spin_lock+0x12b/0x2f0
[  395.940361][ T3020]  ? rcu_is_watching+0x15/0xb0
[  395.940394][ T3020]  wb_writeback+0x456/0xb70
[  395.940421][ T3020]  ? queue_io+0x261/0x4a0
[  395.940450][ T3020]  ? __pfx_wb_writeback+0x10/0x10
[  395.940470][ T3020]  ? do_raw_spin_lock+0x12b/0x2f0
[  395.940508][ T3020]  wb_workfn+0x414/0xf50
[  395.940531][ T3020]  ? look_up_lock_class+0x57/0x110
[  395.940569][ T3020]  ? __pfx_wb_workfn+0x10/0x10
[  395.940593][ T3020]  ? do_raw_spin_lock+0x12b/0x2f0
[  395.940615][ T3020]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  395.940657][ T3020]  ? process_one_work+0x87c/0x1650
[  395.940679][ T3020]  process_one_work+0x949/0x1650
[  395.940711][ T3020]  ? trace_hardirqs_off_finish+0x30/0x30
[  395.940738][ T3020]  ? __pfx_process_one_work+0x10/0x10
[  395.940759][ T3020]  ? do_raw_spin_lock+0x12b/0x2f0
[  395.940796][ T3020]  worker_thread+0xb46/0x1140
[  395.940837][ T3020]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  395.940877][ T3020]  kthread+0x388/0x470
[  395.940897][ T3020]  ? __pfx_worker_thread+0x10/0x10
[  395.940917][ T3020]  ? __pfx_kthread+0x10/0x10
[  395.940937][ T3020]  ret_from_fork+0x51e/0xb90
[  395.940965][ T3020]  ? __pfx_ret_from_fork+0x10/0x10
[  395.940986][ T3020]  ? __switch_to+0xc7d/0x1450
[  395.941010][ T3020]  ? __pfx_kthread+0x10/0x10
[  395.941029][ T3020]  ret_from_fork_asm+0x1a/0x30
[  395.941062][ T3020]  </TASK>
[  395.944118][T16764] XFS (loop5): Quotacheck needed: Please wait.
[  396.154870][ T3020] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  396.205948][ T1333] XFS (loop5): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  396.303684][ T1333] XFS (loop5): Unmount and run xfs_repair
[  396.310401][ T1333] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  396.319673][ T1333] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  396.387062][ T1333] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  396.396236][ T1333] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  396.405766][ T1333] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  396.414642][ T1333] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  396.426274][ T1333] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  396.442596][ T1333] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  396.475189][ T1333] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  396.484353][ T1333] XFS (loop5): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  396.512469][ T1333] loop5: lost filesystem error report for type 5 error -117
[  396.544895][T16764] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  396.603200][T16764] loop5: lost filesystem error report for type 5 error -117
[  396.813135][ T8119] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  396.849366][ T8119] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  396.888281][T16784] syz.4.4157 (16784): drop_caches: 2
[  397.021546][T16820] loop3: detected capacity change from 0 to 4096
[  397.054704][T16820] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  397.212538][T16820] ntfs3(loop3): ino=1a, mi_enum_attr
[  397.235633][T16820] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  397.416028][ T3020] ntfs3(loop3): ino=1e, ntfs3_write_inode failed, -22.
[  397.637745][T16842] loop5: detected capacity change from 0 to 256
[  397.690599][T16842] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  398.382393][T16861] loop3: detected capacity change from 0 to 1024
[  398.477700][T16861] hfsplus: b-tree write err: -5, ino 2
[  398.483929][T16867] random: crng reseeded on system resumption
[  398.515455][T16864] program syz.2.4190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.544646][   T13] hfsplus: b-tree write err: -5, ino 25
[  398.552965][   T13] hfsplus: b-tree write err: -5, ino 4
[  398.561857][   T13] hfsplus: b-tree write err: -5, ino 2
[  398.570640][   T13] hfsplus: b-tree write err: -5, ino 26
[  398.708856][T16880] loop6: detected capacity change from 0 to 128
[  398.747246][T16880] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  398.811903][T16880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  398.838905][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1138.tmp-b7:3' failed: Read-only file system
[  398.854245][T13758] udevd[13758]: symlink '../../loop4' '/dev/disk/by-diskseq/1120.tmp-b7:4' failed: Read-only file system
[  398.855365][ T5844] udevd[5844]: symlink '../../loop6' '/dev/disk/by-diskseq/1139.tmp-b7:6' failed: Read-only file system
[  398.881048][T16886] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  398.922973][ T1333] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  398.942254][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1136.tmp-b7:5' failed: Read-only file system
[  398.962219][ T1333] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  399.001814][ T5844] udevd[5844]: symlink '../../loop6' '/dev/disk/by-diskseq/1139.tmp-b7:6' failed: Read-only file system
[  399.009218][ T1333] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  399.064624][ T1333] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  399.069994][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1120.tmp-b7:4' failed: Read-only file system
[  399.154371][T13753] udevd[13753]: symlink '../../loop6' '/dev/disk/by-diskseq/1139.tmp-b7:6' failed: Read-only file system
[  399.195014][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1136.tmp-b7:5' failed: Read-only file system
[  399.217264][T16899] loop5: detected capacity change from 0 to 128
[  399.230336][T13758] udevd[13758]: symlink '../../loop3' '/dev/disk/by-diskseq/1138.tmp-b7:3' failed: Read-only file system
[  399.264367][T13753] udevd[13753]: symlink '../../loop6' '/dev/disk/by-diskseq/1139.tmp-b7:6' failed: Read-only file system
[  399.298644][T16899] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  399.329408][T16906] loop4: detected capacity change from 0 to 256
[  399.340947][T16899] ext4 filesystem being mounted at /661/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  399.447516][ T8119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  399.504389][T16915] tipc: New replicast peer: 255.255.255.255
[  399.542610][T16915] tipc: Enabled bearer <udp:syz2>, priority 10
[  399.666134][T16922] veth0_to_team: entered promiscuous mode
[  399.671900][T16922] veth0_to_team: entered allmulticast mode
[  400.163755][T16907] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  400.221249][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  400.234502][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  400.234535][ T5838] Tainted: [L]=SOFTLOCKUP
[  400.234543][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  400.234557][ T5838] Workqueue: hci2 hci_rx_work
[  400.234591][ T5838] Call Trace:
[  400.234599][ T5838]  <TASK>
[  400.234608][ T5838]  dump_stack_lvl+0xe8/0x150
[  400.234640][ T5838]  sysfs_create_dir_ns+0x271/0x2a0
[  400.234672][ T5838]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  400.234702][ T5838]  ? do_raw_spin_unlock+0xf5/0x210
[  400.234730][ T5838]  kobject_add_internal+0x62b/0xd00
[  400.234758][ T5838]  kobject_add+0x163/0x240
[  400.234796][ T5838]  ? __pfx_kobject_add+0x10/0x10
[  400.234825][ T5838]  ? _raw_spin_unlock+0x28/0x50
[  400.234852][ T5838]  ? get_device_parent+0x366/0x3a0
[  400.234883][ T5838]  device_add+0x408/0xb70
[  400.234913][ T5838]  hci_conn_add_sysfs+0xd5/0x210
[  400.234941][ T5838]  le_conn_complete_evt+0xf1d/0x1430
[  400.234973][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  400.234991][ T5838]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  400.235019][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[  400.235045][ T5838]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  400.235070][ T5838]  ? skb_pull_data+0xfb/0x200
[  400.235101][ T5838]  hci_le_enh_conn_complete_evt+0x189/0x490
[  400.235124][ T5838]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  400.235149][ T5838]  hci_event_packet+0x7af/0x12c0
[  400.235182][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  400.235203][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[  400.235234][ T5838]  ? kcov_remote_start+0x49a/0x7a0
[  400.235266][ T5838]  ? hci_send_to_monitor+0xe2/0x590
[  400.235290][ T5838]  hci_rx_work+0x3ee/0x1040
[  400.235328][ T5838]  ? process_one_work+0x87c/0x1650
[  400.235364][ T5838]  process_one_work+0x949/0x1650
[  400.235408][ T5838]  ? __pfx_process_one_work+0x10/0x10
[  400.235433][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[  400.235467][ T5838]  worker_thread+0xb46/0x1140
[  400.235515][ T5838]  kthread+0x388/0x470
[  400.235535][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  400.235559][ T5838]  ? __pfx_kthread+0x10/0x10
[  400.235580][ T5838]  ret_from_fork+0x51e/0xb90
[  400.235609][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[  400.235634][ T5838]  ? __switch_to+0xc7d/0x1450
[  400.235662][ T5838]  ? __pfx_kthread+0x10/0x10
[  400.235683][ T5838]  ret_from_fork_asm+0x1a/0x30
[  400.235717][ T5838]  </TASK>
[  400.468335][ T5838] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  400.482663][ T5838] Bluetooth: hci2: failed to register connection device
[  400.590910][ T5838] Bluetooth: hci2: unexpected event for opcode 0x1408
[  400.637992][T16956] loop4: detected capacity change from 0 to 1024
[  400.715454][T16963] loop5: detected capacity change from 0 to 512
[  400.729154][T16956] hfsplus: failed to load root directory
[  400.799194][T16963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.818320][T16933] loop3: detected capacity change from 0 to 32768
[  400.825002][T16963] ext4 filesystem being mounted at /667/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.858799][T16963] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 32: comm syz.5.4235: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1
[  400.905818][T16933] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  401.084711][T16933] XFS (loop3): Ending clean mount
[  401.098970][T16984] loop4: detected capacity change from 0 to 64
[  401.112837][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.119766][T16933] XFS (loop3): Quotacheck needed: Please wait.
[  401.194488][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4242'.
[  401.230058][T16933] XFS (loop3): Quotacheck: Done.
[  401.429976][ T5826] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  401.440982][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4248'.
[  401.713360][T17003] loop6: detected capacity change from 0 to 4096
[  401.815060][T17010] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  402.205476][ T5923] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  402.341796][T17030] loop5: detected capacity change from 0 to 4096
[  402.368408][ T5923] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  402.384965][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  402.388648][T17030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.404875][ T5923] usb 5-1: config 0 has no interface number 0
[  402.413691][ T5923] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  402.444872][ T5923] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  402.471649][T17023] loop6: detected capacity change from 0 to 32768
[  402.480252][T17023] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4258 (17023)
[  402.496736][ T5923] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  402.506153][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.514372][ T5923] usb 5-1: Product: syz
[  402.519227][ T5923] usb 5-1: Manufacturer: syz
[  402.523835][ T5923] usb 5-1: SerialNumber: syz
[  402.546274][ T5923] usb 5-1: config 0 descriptor??
[  402.554194][T17023] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  402.590760][T17030] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file!
[  402.605558][T17023] BTRFS info (device loop6): using sha256 checksum algorithm
[  402.613043][T17023] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  402.703815][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.879700][T17023] BTRFS info (device loop6): rebuilding free space tree
[  402.939180][T17023] BTRFS info (device loop6): disabling free space tree
[  402.959061][T17023] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  402.984992][T17023] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  403.023078][T17023] BTRFS info (device loop6): turning off barriers
[  403.038254][T17023] BTRFS info (device loop6): turning on sync discard
[  403.057002][T17023] BTRFS info (device loop6): enabling disk space caching
[  403.064270][T17023] BTRFS info (device loop6): force clearing of disk cache
[  403.084865][T17023] BTRFS info (device loop6): force lzo compression, level 1
[  403.207413][T11600] usb 5-1: USB disconnect, device number 29
[  403.216556][T15978] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  403.375227][T17056] loop3: detected capacity change from 0 to 32768
[  403.423010][T17066] netlink: 'syz.5.4272': attribute type 1 has an invalid length.
[  403.432770][T17066] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4272'.
[  403.442309][T13753]  loop3: p1 p3 < >
[  403.553514][T17056]  loop3: p1 p3 < >
[  403.707323][T17072] xt_socket: unknown flags 0xd0
[  403.723816][T17071] loop3: detected capacity change from 0 to 4096
[  403.793899][T17075] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  403.881979][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1157.tmp-b7:5' failed: Read-only file system
[  403.915357][T17077] pim6reg: entered allmulticast mode
[  403.988884][ T5844] udevd[5844]: symlink '../../loop6' '/dev/disk/by-diskseq/1159.tmp-b7:6' failed: Read-only file system
[  404.133680][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1151.tmp-b7:4' failed: Read-only file system
[  404.172120][T13758] udevd[13758]: symlink '../../loop5' '/dev/disk/by-diskseq/1157.tmp-b7:5' failed: Read-only file system
[  404.204018][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1158.tmp-b7:3' failed: Read-only file system
[  404.258070][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1151.tmp-b7:4' failed: Read-only file system
[  404.265345][T17092] [U] �
[  404.276898][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:3' failed: Read-only file system
[  404.342330][ T5844] udevd[5844]: symlink '../../loop6' '/dev/disk/by-diskseq/1159.tmp-b7:6' failed: Read-only file system
[  404.387530][T13753] udevd[13753]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  404.401392][ T5818] udevd[5818]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  404.464762][T17098] loop5: detected capacity change from 0 to 128
[  404.511467][T17098] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  404.586259][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  404.632991][T17098] ext4 filesystem being mounted at /680/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  404.758269][ T8119] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  405.154669][T17116] hfsplus: failed to load root directory
[  405.201687][T17120] netlink: 'syz.2.4296': attribute type 29 has an invalid length.
[  405.489745][T17134] netdevsim netdevsim6: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component
[  405.521241][   T30] audit: type=1326 audit(1771351710.407:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  405.567469][   T30] audit: type=1326 audit(1771351710.407:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  405.661747][   T30] audit: type=1326 audit(1771351710.437:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  405.717790][T17146] fuse: Bad value for 'user_id'
[  405.722982][T17146] fuse: Bad value for 'user_id'
[  405.749650][T17148] sp0: Synchronizing with TNC
[  405.750198][   T30] audit: type=1326 audit(1771351710.437:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  405.781168][T17147] [U] �`
[  405.855283][   T30] audit: type=1326 audit(1771351710.437:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  405.894255][T17152] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4312'.
[  405.908391][T17152] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4312'.
[  405.970115][   T30] audit: type=1326 audit(1771351710.437:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  406.042589][   T30] audit: type=1326 audit(1771351710.437:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  406.112672][   T30] audit: type=1326 audit(1771351710.437:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  406.116021][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4315'.
[  406.167297][   T30] audit: type=1326 audit(1771351710.437:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  406.232116][   T30] audit: type=1326 audit(1771351710.437:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.3.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c5f9c629 code=0x7ffc0000
[  406.465411][T17177] netlink: 'syz.2.4324': attribute type 1 has an invalid length.
[  406.652077][T17190] set_capacity_and_notify: 2 callbacks suppressed
[  406.652096][T17190] loop6: detected capacity change from 0 to 256
[  406.737928][T17190] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  407.414667][T17229] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4349'.
[  408.180972][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4366'.
[  408.192121][T17263] openvswitch: netlink: nsh attr 3575 is out of range max 3
[  408.898346][ T5844] udevd[5844]: symlink '../../loop3' '/dev/disk/by-diskseq/1162.tmp-b7:3' failed: Read-only file system
[  408.969550][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1168.tmp-b7:4' failed: Read-only file system
[  409.033956][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'.
[  409.051305][T17299] bond1 (unregistering): Released all slaves
[  409.057384][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4385'.
[  409.164965][   T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  409.295628][T17286] loop5: detected capacity change from 0 to 65536
[  409.322585][T17286] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  409.344710][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.356624][   T10] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  409.366870][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.377850][   T10] usb 4-1: config 0 descriptor??
[  409.390878][T17286] XFS (loop5): Ending clean mount
[  409.397317][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1171.tmp-b7:5' failed: Read-only file system
[  409.417385][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-uuid/9b7348e5-2fa0-41a5-9526-c53a678b01f3.tmp-b7:5' failed: Read-only file system
[  409.418075][T17286] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  409.442666][T17286] XFS (loop5): Unmount and run xfs_repair
[  409.448749][T17286] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  409.456238][T17286] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  409.465365][T17286] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  409.474285][T17286] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04  ................
[  409.483233][T17286] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  409.492273][T17286] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  409.501228][T17286] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.510427][T17286] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.519336][T17286] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.528322][T17286] XFS (loop5): metadata I/O error in "xfs_read_agf+0x289/0x5f0" at daddr 0x1 len 1 error 74
[  409.531369][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1171.tmp-b7:5' failed: Read-only file system
[  409.551703][T17286] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x8001 
[  409.551876][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-uuid/9b7348e5-2fa0-41a5-9526-c53a678b01f3.tmp-b7:5' failed: Read-only file system
[  409.564860][T17286] XFS (loop5): Unmount and run xfs_repair
[  409.583073][T17286] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  409.597774][T17286] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00  XAGF..........@.
[  409.606838][T17286] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  409.616030][T17286] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  409.624953][T17286] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00  ......;_..;\....
[  409.633810][T17286] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  409.642699][T17286] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.651729][T17286] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.660697][T17286] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  409.669758][T17286] XFS (loop5): metadata I/O error in "xfs_read_agf+0x289/0x5f0" at daddr 0x8001 len 1 error 74
[  409.693119][ T8119] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  409.702682][ T8119] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  409.768764][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1168.tmp-b7:4' failed: Read-only file system
[  409.797604][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1171.tmp-b7:5' failed: Read-only file system
[  409.800918][   T10] dragonrise 0003:0079:0006.0048: unknown main item tag 0x0
[  409.839725][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1171.tmp-b7:5' failed: Read-only file system
[  409.866068][   T10] dragonrise 0003:0079:0006.0048: unknown main item tag 0x0
[  409.870466][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1172.tmp-b7:5' failed: Read-only file system
[  409.873442][   T10] dragonrise 0003:0079:0006.0048: unknown main item tag 0x0
[  409.926151][   T10] dragonrise 0003:0079:0006.0048: unknown main item tag 0x0
[  409.938187][   T10] dragonrise 0003:0079:0006.0048: unknown main item tag 0x0
[  409.947535][   T10] dragonrise 0003:0079:0006.0048: unknown main item tag 0x0
[  409.967984][   T10] dragonrise 0003:0079:0006.0048: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0
[  409.984842][   T10] dragonrise 0003:0079:0006.0048: no inputs found
[  409.991281][   T10] dragonrise 0003:0079:0006.0048: force feedback init failed
[  410.030569][   T10] usb 4-1: USB disconnect, device number 35
[  410.056878][T17317] fido_id[17317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  410.182784][T17322] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4391'.
[  410.207196][T17324] syz.5.4387 (17324): drop_caches: 4
[  410.324022][T17330] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4394'.
[  410.333741][T17330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4394'.
[  410.563161][T17342] netlink: 'syz.2.4400': attribute type 1 has an invalid length.
[  410.571295][T17342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.842263][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4407'.
[  411.102881][T17362] loop6: detected capacity change from 0 to 4096
[  411.131641][T17362] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  411.297970][T17362] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  411.335237][T17362] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  411.476178][T17383] netlink: 'syz.5.4420': attribute type 32 has an invalid length.
[  411.524661][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4420'.
[  411.621432][T17383] bond1: option coupled_control: invalid value (20)
[  411.679410][T17383] bond1 (unregistering): Released all slaves
[  412.097814][T17379] loop4: detected capacity change from 0 to 32768
[  412.121417][T17379] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4418 (17379)
[  412.176918][T17379] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  412.209517][T17379] BTRFS info (device loop4): using sha256 checksum algorithm
[  412.235375][T17379] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  412.488916][T17379] BTRFS info (device loop4): rebuilding free space tree
[  412.546896][T17379] BTRFS info (device loop4): disabling free space tree
[  412.571106][T17379] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  412.606936][T17379] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  412.634305][T17428] syz.2.4434 uses old SIOCAX25GETINFO
[  412.671450][T17379] BTRFS info (device loop4): turning off barriers
[  412.687367][T17379] BTRFS info (device loop4): turning on sync discard
[  412.714439][T17379] BTRFS info (device loop4): enabling disk space caching
[  412.753595][T17379] BTRFS info (device loop4): force clearing of disk cache
[  412.796721][T17379] BTRFS info (device loop4): force lzo compression, level 1
[  412.886142][T17396] loop5: detected capacity change from 0 to 32768
[  412.920376][T17396] btrfs: Deprecated parameter 'usebackuproot'
[  412.950367][T17396] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  412.975457][T17396] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4426 (17396)
[  412.989240][ T5835] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  413.095247][T17396] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  413.156506][T17396] BTRFS info (device loop5): using crc32c checksum algorithm
[  413.215898][T17451] loop3: detected capacity change from 0 to 256
[  413.355958][   T49] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  413.422860][T17396] BTRFS error (device loop5): failed to load root extent
[  413.500416][T17467] loop6: detected capacity change from 0 to 4096
[  413.504865][T17396] BTRFS warning (device loop5): try to load backup roots slot 1
[  413.508584][T17467] ntfs3: Unknown parameter 'noprealloc'
[  413.521916][ T3020] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  413.596182][T17396] BTRFS warning (device loop5): couldn't read tree root
[  413.604491][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4448'.
[  413.630024][T17396] BTRFS warning (device loop5): try to load backup roots slot 2
[  413.676709][   T49] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  413.703684][T17396] BTRFS warning (device loop5): couldn't read tree root
[  413.755145][T17396] BTRFS warning (device loop5): try to load backup roots slot 3
[  413.839926][T17396] BTRFS info (device loop5): rebuilding free space tree
[  413.854138][T17479] loop3: detected capacity change from 0 to 256
[  413.901339][T17479] exfat: Deprecated parameter 'utf8'
[  413.926880][T17396] BTRFS info (device loop5): checking UUID tree
[  413.934124][ T5818] udevd[5818]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  413.963147][T17396] BTRFS info (device loop5): setting nodatasum
[  413.972265][T17396] BTRFS info (device loop5): setting nodatacow
[  413.980616][ T5818] udevd[5818]: symlink '../../loop6' '/dev/disk/by-diskseq/1179.tmp-b7:6' failed: Read-only file system
[  413.992194][T17396] BTRFS info (device loop5): enabling ssd optimizations
[  414.008558][T13758] udevd[13758]: symlink '../../loop6' '/dev/disk/by-diskseq/1179.tmp-b7:6' failed: Read-only file system
[  414.018477][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1182.tmp-b7:3' failed: Read-only file system
[  414.020934][T17396] BTRFS info (device loop5): turning off barriers
[  414.056885][T17479] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  414.083601][ T5818] udevd[5818]: symlink '../../loop4' '/dev/disk/by-diskseq/1178.tmp-b7:4' failed: Read-only file system
[  414.103504][T13758] udevd[13758]: symlink '../../loop6' '/dev/disk/by-diskseq/1179.tmp-b7:6' failed: Read-only file system
[  414.109896][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system
[  414.116496][T17396] BTRFS info (device loop5): turning on sync discard
[  414.142869][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1176.tmp-b7:5' failed: Read-only file system
[  414.160087][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4454'.
[  414.175040][T17396] BTRFS info (device loop5): enabling free space tree
[  414.175812][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:5' failed: Read-only file system
[  414.181816][T17396] BTRFS info (device loop5): force clearing of disk cache
[  414.181836][T17396] BTRFS info (device loop5): trying to use backup root at mount time
[  414.181855][T17396] BTRFS info (device loop5): max_inline set to 0
[  414.207052][T17486] trusted_key: encrypted_key: key user:syz not found
[  414.257474][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1182.tmp-b7:3' failed: Read-only file system
[  414.544715][ T8119] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  414.710319][T17497] loop3: detected capacity change from 0 to 8
[  414.964222][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'.
[  415.047948][T17503] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4462'.
[  415.060118][T17503] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4462'.
[  415.114530][T17493] loop4: detected capacity change from 0 to 40427
[  415.133074][T17493] F2FS-fs (loop4): Image doesn't support compression
[  415.173376][T17493] F2FS-fs (loop4): build fault injection rate: 690
[  415.207195][T17493] F2FS-fs (loop4): invalid crc value
[  415.324290][T17493] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  415.336167][T17493] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  415.413044][ T5835] syz-executor: attempt to access beyond end of device
[  415.413044][ T5835] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  415.427368][   T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  415.434969][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.434996][ T5835] Tainted: [L]=SOFTLOCKUP
[  415.435003][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  415.435013][ T5835] Call Trace:
[  415.435021][ T5835]  <TASK>
[  415.435029][ T5835]  dump_stack_lvl+0xe8/0x150
[  415.435058][ T5835]  f2fs_handle_critical_error+0x37c/0x540
[  415.435089][ T5835]  f2fs_write_end_io+0xcdb/0xff0
[  415.435125][ T5835]  __submit_merged_bio+0x256/0x700
[  415.435157][ T5835]  __submit_merged_write_cond+0x3c9/0x4e0
[  415.435190][ T5835]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  415.435236][ T5835]  f2fs_write_data_pages+0x2975/0x35e0
[  415.435292][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  415.435323][ T5835]  ? css_rstat_updated+0x23a/0x530
[  415.435370][ T5835]  ? rcu_is_watching+0x15/0xb0
[  415.435394][ T5835]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  415.435422][ T5835]  ? __lock_acquire+0x6b5/0x2cf0
[  415.435460][ T5835]  ? __lock_acquire+0x6b5/0x2cf0
[  415.435487][ T5835]  ? do_raw_spin_lock+0x12b/0x2f0
[  415.435517][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  415.435536][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  415.435555][ T5835]  do_writepages+0x32e/0x550
[  415.435590][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  415.435613][ T5835]  filemap_fdatawrite+0x1e9/0x2f0
[  415.435641][ T5835]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  415.435710][ T5835]  ? do_raw_spin_unlock+0xf5/0x210
[  415.435734][ T5835]  f2fs_sync_dirty_inodes+0x30e/0x860
[  415.435791][ T5835]  f2fs_write_checkpoint+0x9df/0x26a0
[  415.435843][ T5835]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  415.435916][ T5835]  kill_f2fs_super+0x314/0x720
[  415.435941][ T5835]  ? __pfx_kill_f2fs_super+0x10/0x10
[  415.435973][ T5835]  ? lockdep_hardirqs_on+0x7a/0x110
[  415.436010][ T5835]  deactivate_locked_super+0xbc/0x130
[  415.436040][ T5835]  cleanup_mnt+0x437/0x4d0
[  415.436059][ T5835]  ? _raw_spin_unlock_irq+0x23/0x50
[  415.436084][ T5835]  task_work_run+0x1d9/0x270
[  415.436107][ T5835]  ? __pfx_task_work_run+0x10/0x10
[  415.436138][ T5835]  exit_to_user_mode_loop+0xed/0x480
[  415.436158][ T5835]  ? rcu_is_watching+0x15/0xb0
[  415.436185][ T5835]  do_syscall_64+0x32d/0xf80
[  415.436207][ T5835]  ? trace_irq_disable+0x3b/0x150
[  415.436222][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.436240][ T5835]  ? clear_bhb_loop+0x40/0x90
[  415.436262][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.436279][ T5835] RIP: 0033:0x7f457d39d897
[  415.436297][ T5835] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  415.436312][ T5835] RSP: 002b:00007ffd6aa89af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  415.436332][ T5835] RAX: 0000000000000000 RBX: 00007f457d431ef0 RCX: 00007f457d39d897
[  415.436344][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6aa89bb0
[  415.436356][ T5835] RBP: 00007ffd6aa89bb0 R08: 00007ffd6aa8abb0 R09: 00000000ffffffff
[  415.436368][ T5835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6aa8ac40
[  415.436380][ T5835] R13: 00007f457d431ef0 R14: 000000000006568a R15: 00007ffd6aa8ac80
[  415.436411][ T5835]  </TASK>
[  415.436419][ T5835] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  415.489555][T17522] vcan1: entered promiscuous mode
[  415.490019][T17522] team0: Device vcan1 is up. Set it down before adding it as a team port
[  415.857394][   T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  415.873624][   T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  415.903209][   T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  415.934951][   T10] usb 4-1: config 220 has no interface number 2
[  415.941730][   T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  415.977126][   T10] usb 4-1: config 220 interface 0 has no altsetting 0
[  416.001334][   T10] usb 4-1: config 220 interface 76 has no altsetting 0
[  416.017843][   T10] usb 4-1: config 220 interface 1 has no altsetting 0
[  416.034569][T17531] loop4: detected capacity change from 0 to 2048
[  416.034899][   T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  416.060999][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.074841][   T10] usb 4-1: Product: syz
[  416.079015][   T10] usb 4-1: Manufacturer: syz
[  416.093285][   T10] usb 4-1: SerialNumber: syz
[  416.157646][T17531] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.199499][T17539] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  416.346157][   T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  416.353493][   T10] uvcvideo 4-1:220.0: No valid video chain found.
[  416.393385][   T10] usb 4-1: selecting invalid altsetting 0
[  416.420369][   T10] usb 4-1: selecting invalid altsetting 0
[  416.435166][   T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  416.455616][   T10] usb 4-1: USB disconnect, device number 36
[  416.551460][T17552] loop5: detected capacity change from 0 to 128
[  416.585046][T17552] FAT-fs (loop5): Directory bread(block 524322) failed
[  416.591949][T17552] FAT-fs (loop5): Directory bread(block 524323) failed
[  416.606220][T17552] FAT-fs (loop5): Directory bread(block 524324) failed
[  416.613164][T17552] FAT-fs (loop5): Directory bread(block 524325) failed
[  416.620820][T17552] FAT-fs (loop5): Directory bread(block 524326) failed
[  416.632331][T17552] FAT-fs (loop5): Directory bread(block 524327) failed
[  416.639677][T17552] FAT-fs (loop5): Directory bread(block 524328) failed
[  416.646880][T17552] FAT-fs (loop5): Directory bread(block 524329) failed
[  416.674743][T17552] FAT-fs (loop5): Directory bread(block 524322) failed
[  416.683513][T17552] FAT-fs (loop5): Directory bread(block 524323) failed
[  416.851336][T17565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.943062][T17567] loop4: detected capacity change from 0 to 512
[  416.968192][T17567] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4492: Invalid inode bitmap blk 4 in block_group 0
[  417.035659][T17567] loop4: lost filesystem error report for type 5 error -117
[  417.037524][T17567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.096812][T17579] macsec0: entered allmulticast mode
[  417.132862][T17579] veth1_macvtap: entered allmulticast mode
[  417.167429][T17581] loop5: detected capacity change from 0 to 1024
[  417.176731][T17581] EXT4-fs: Ignoring removed oldalloc option
[  417.176848][T17579] macsec0: left allmulticast mode
[  417.182750][T17581] EXT4-fs: Ignoring removed bh option
[  417.196438][T17579] veth1_macvtap: left allmulticast mode
[  417.211962][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.234266][T17581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.331018][T17581] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  417.472499][T17592] bond1: (slave bond_slave_1): Device is not our slave
[  417.480293][T17592] bond1: option active_slave: invalid value (bond_slave_1)
[  417.488272][ T8119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.525767][T17592] bond1 (unregistering): Released all slaves
[  417.634299][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  417.634316][   T30] audit: type=1326 audit(1771351722.517:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  417.745685][   T30] audit: type=1326 audit(1771351722.557:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  417.845518][   T30] audit: type=1326 audit(1771351722.557:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  417.872003][T11601] kernel read not supported for file /rfkill (pid: 11601 comm: kworker/0:12)
[  417.880654][   T30] audit: type=1326 audit(1771351722.567:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  417.907739][   T30] audit: type=1326 audit(1771351722.567:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  417.994977][   T30] audit: type=1326 audit(1771351722.567:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  418.048299][   T30] audit: type=1326 audit(1771351722.567:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  418.102304][   T30] audit: type=1326 audit(1771351722.567:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17597 comm="syz.2.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572a39c629 code=0x7ffc0000
[  418.282550][T17622] netlink: 'syz.4.4517': attribute type 2 has an invalid length.
[  418.313458][T17622] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4517'.
[  418.397467][T17626] loop5: detected capacity change from 0 to 64
[  418.496252][T17630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4520'.
[  418.638545][T17634] loop4: detected capacity change from 0 to 256
[  418.681637][T17634] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  418.728334][T17636] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  418.958493][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1199.tmp-b7:4' failed: Read-only file system
[  419.039033][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1199.tmp-b7:4' failed: Read-only file system
[  419.051173][T13753] udevd[13753]: symlink '../../loop6' '/dev/disk/by-diskseq/1181.tmp-b7:6' failed: Read-only file system
[  419.113614][T13753] udevd[13753]: symlink '../../loop5' '/dev/disk/by-diskseq/1198.tmp-b7:5' failed: Read-only file system
[  419.141650][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1199.tmp-b7:4' failed: Read-only file system
[  419.168837][T13758] udevd[13758]: symlink '../../loop3' '/dev/disk/by-diskseq/1186.tmp-b7:3' failed: Read-only file system
[  419.178735][T13753] udevd[13753]: symlink '../../loop6' '/dev/disk/by-diskseq/1181.tmp-b7:6' failed: Read-only file system
[  419.238357][T17656] netlink: 'syz.4.4533': attribute type 3 has an invalid length.
[  419.246838][T17656] netlink: 'syz.4.4533': attribute type 1 has an invalid length.
[  419.254575][T17656] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4533'.
[  419.288672][ T5844] udevd[5844]: symlink '../../loop5' '/dev/disk/by-diskseq/1198.tmp-b7:5' failed: Read-only file system
[  419.317604][T13753] udevd[13753]: symlink '../../loop3' '/dev/disk/by-diskseq/1186.tmp-b7:3' failed: Read-only file system
[  419.397150][ T5844] udevd[5844]: symlink '../../loop4' '/dev/disk/by-diskseq/1200.tmp-b7:4' failed: Read-only file system
[  420.049494][T17694] loop5: detected capacity change from 0 to 128
[  420.081162][T17694] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  420.127678][T17694] hpfs: filesystem error: improperly stopped
[  420.134008][T17694] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  420.165127][T17694] hpfs: You really don't want any checks? You are crazy...
[  420.183864][T17694] hpfs: hpfs_map_sector(): read error
[  420.198939][T17694] hpfs: code page support is disabled
[  420.205698][T17694] hpfs: hpfs_map_4sectors(): unaligned read
[  420.220258][T17694] hpfs: hpfs_map_4sectors(): unaligned read
[  420.241565][T17694] hpfs: filesystem error: unable to find root dir
[  420.545547][T17710] vlan3: entered allmulticast mode
[  420.550763][T17710] macvtap0: entered allmulticast mode
[  420.916197][T17702] loop3: detected capacity change from 0 to 32768
[  420.948565][T17702] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  420.998677][T17702] XFS (loop3): Ending clean mount
[  421.007643][T17702] XFS (loop3): Quotacheck needed: Please wait.
[  421.051334][T17702] XFS (loop3): Quotacheck: Done.
[  421.131589][ T5826] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  421.492372][T17754] loop3: detected capacity change from 0 to 256
[  421.500175][T17754] exfat: Deprecated parameter 'utf8'
[  421.537843][T17754] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  422.014726][T17782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4588'.
[  422.283020][T17794] loop4: detected capacity change from 0 to 128
[  422.336795][T17794] FAT-fs (loop4): Directory bread(block 524322) failed
[  422.354188][T17794] FAT-fs (loop4): Directory bread(block 524323) failed
[  422.372987][T17794] FAT-fs (loop4): Directory bread(block 524324) failed
[  422.392133][T17794] FAT-fs (loop4): Directory bread(block 524325) failed
[  422.411266][T17794] FAT-fs (loop4): Directory bread(block 524326) failed
[  422.444001][T17794] FAT-fs (loop4): Directory bread(block 524327) failed
[  422.444225][T17798] loop3: detected capacity change from 0 to 64
[  422.468708][T17794] FAT-fs (loop4): Directory bread(block 524328) failed
[  422.513938][T17794] FAT-fs (loop4): Directory bread(block 524329) failed
[  422.555889][T17798] syz.3.4595: attempt to access beyond end of device
[  422.555889][T17798] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  422.796728][T17807] loop6: detected capacity change from 0 to 64
[  422.895789][T17810] ------------[ cut here ]------------
[  422.901316][T17810] old_ns_root->mnt_id_unique != 1
[  422.901343][T17810] WARNING: fs/namespace.c:3112 at vfs_open_tree+0xf35/0xfb0, CPU#1: syz.4.4601/17810
[  422.916568][T17810] Modules linked in:
[  422.920489][T17810] CPU: 1 UID: 0 PID: 17810 Comm: syz.4.4601 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  422.932205][T17810] Tainted: [L]=SOFTLOCKUP
[  422.936903][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  422.947035][T17810] RIP: 0010:vfs_open_tree+0xf35/0xfb0
[  422.952427][T17810] Code: 35 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 5e 35 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 4c 35 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 3e 35 78 ff 90 0f 0b 90 e9 18 f6 ff ff
[  422.972454][T17810] RSP: 0018:ffffc9000d1d7d80 EFLAGS: 00010283
[  422.978593][T17810] RAX: ffffffff824d7d44 RBX: 0000000080000051 RCX: 0000000000080000
[  422.986654][T17810] RDX: ffffc9000d201000 RSI: 0000000000000222 RDI: 0000000000000223
[  422.994668][T17810] RBP: ffffc9000d1d7eb0 R08: ffffffff8e5fa2eb R09: 1ffffffff1cbf45d
[  423.002942][T17810] R10: dffffc0000000000 R11: fffffbfff1cbf45e R12: ffff88801eeb96c0
[  423.011011][T17810] R13: 0000000000001802 R14: ffff888032253900 R15: dffffc0000000000
[  423.019054][T17810] FS:  00007f457e1976c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000
[  423.028510][T17810] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  423.035284][T17810] CR2: 0000200000000000 CR3: 000000004d89c000 CR4: 00000000003526f0
[  423.043302][T17810] Call Trace:
[  423.046660][T17810]  <TASK>
[  423.049613][T17810]  ? __pfx_vfs_open_tree+0x10/0x10
[  423.054741][T17810]  ? _raw_spin_unlock+0x28/0x50
[  423.059960][T17810]  ? alloc_fd+0x64b/0x6c0
[  423.064329][T17810]  __x64_sys_open_tree+0x96/0x110
[  423.069444][T17810]  do_syscall_64+0x14d/0xf80
[  423.074073][T17810]  ? trace_irq_disable+0x3b/0x150
[  423.079179][T17810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.085548][T17810]  ? clear_bhb_loop+0x40/0x90
[  423.090245][T17810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.096222][T17810] RIP: 0033:0x7f457d39c629
[  423.100645][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.120630][T17810] RSP: 002b:00007f457e197028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  423.129294][T17810] RAX: ffffffffffffffda RBX: 00007f457d615fa0 RCX: 00007f457d39c629
[  423.137477][T17810] RDX: 0000000000001802 RSI: 0000200000000000 RDI: 0000000000000003
[  423.145806][T17810] RBP: 00007f457d432b39 R08: 0000000000000000 R09: 0000000000000000
[  423.153792][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  423.161858][T17810] R13: 00007f457d616038 R14: 00007f457d615fa0 R15: 00007ffd6aa8a888
[  423.169899][T17810]  </TASK>
[  423.172944][T17810] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  423.180236][T17810] CPU: 1 UID: 0 PID: 17810 Comm: syz.4.4601 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  423.191159][T17810] Tainted: [L]=SOFTLOCKUP
[  423.195465][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  423.205505][T17810] Call Trace:
[  423.208773][T17810]  <TASK>
[  423.211690][T17810]  vpanic+0x56c/0xa60
[  423.215671][T17810]  ? __pfx__printk+0x10/0x10
[  423.220250][T17810]  ? __pfx_vpanic+0x10/0x10
[  423.224744][T17810]  ? is_bpf_text_address+0x292/0x2b0
[  423.230024][T17810]  ? is_bpf_text_address+0x26/0x2b0
[  423.235227][T17810]  panic+0xc5/0xd0
[  423.238953][T17810]  ? __pfx_panic+0x10/0x10
[  423.243389][T17810]  __warn+0x315/0x4f0
[  423.247360][T17810]  ? vfs_open_tree+0xf35/0xfb0
[  423.252115][T17810]  ? vfs_open_tree+0xf35/0xfb0
[  423.256871][T17810]  __report_bug+0x29a/0x540
[  423.261369][T17810]  ? vfs_open_tree+0xf35/0xfb0
[  423.266122][T17810]  ? __pfx___report_bug+0x10/0x10
[  423.271134][T17810]  ? ida_alloc_range+0x843/0x8a0
[  423.276072][T17810]  ? __pfx_ida_alloc_range+0x10/0x10
[  423.281349][T17810]  ? vfs_open_tree+0xf35/0xfb0
[  423.286099][T17810]  report_bug+0x16a/0x220
[  423.290420][T17810]  ? vfs_open_tree+0xf35/0xfb0
[  423.295201][T17810]  ? vfs_open_tree+0xf37/0xfb0
[  423.299951][T17810]  handle_bug+0x98/0x200
[  423.304194][T17810]  exc_invalid_op+0x1a/0x50
[  423.308682][T17810]  asm_exc_invalid_op+0x1a/0x20
[  423.313519][T17810] RIP: 0010:vfs_open_tree+0xf35/0xfb0
[  423.318877][T17810] Code: 35 78 ff 49 bf 00 00 00 00 00 fc ff df e9 1e fb ff ff e8 5e 35 78 ff 4d 63 ee 4c 8b 64 24 08 e9 64 ff ff ff e8 4c 35 78 ff 90 <0f> 0b 90 e9 d1 f5 ff ff e8 3e 35 78 ff 90 0f 0b 90 e9 18 f6 ff ff
[  423.338469][T17810] RSP: 0018:ffffc9000d1d7d80 EFLAGS: 00010283
[  423.344531][T17810] RAX: ffffffff824d7d44 RBX: 0000000080000051 RCX: 0000000000080000
[  423.352487][T17810] RDX: ffffc9000d201000 RSI: 0000000000000222 RDI: 0000000000000223
[  423.360444][T17810] RBP: ffffc9000d1d7eb0 R08: ffffffff8e5fa2eb R09: 1ffffffff1cbf45d
[  423.368402][T17810] R10: dffffc0000000000 R11: fffffbfff1cbf45e R12: ffff88801eeb96c0
[  423.376370][T17810] R13: 0000000000001802 R14: ffff888032253900 R15: dffffc0000000000
[  423.384333][T17810]  ? vfs_open_tree+0xf34/0xfb0
[  423.389100][T17810]  ? __pfx_vfs_open_tree+0x10/0x10
[  423.394203][T17810]  ? _raw_spin_unlock+0x28/0x50
[  423.399043][T17810]  ? alloc_fd+0x64b/0x6c0
[  423.403372][T17810]  __x64_sys_open_tree+0x96/0x110
[  423.408402][T17810]  do_syscall_64+0x14d/0xf80
[  423.412984][T17810]  ? trace_irq_disable+0x3b/0x150
[  423.417991][T17810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.424041][T17810]  ? clear_bhb_loop+0x40/0x90
[  423.428708][T17810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  423.434591][T17810] RIP: 0033:0x7f457d39c629
[  423.439003][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.458594][T17810] RSP: 002b:00007f457e197028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[  423.466996][T17810] RAX: ffffffffffffffda RBX: 00007f457d615fa0 RCX: 00007f457d39c629
[  423.474955][T17810] RDX: 0000000000001802 RSI: 0000200000000000 RDI: 0000000000000003
[  423.482912][T17810] RBP: 00007f457d432b39 R08: 0000000000000000 R09: 0000000000000000
[  423.490870][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  423.498826][T17810] R13: 00007f457d616038 R14: 00007f457d615fa0 R15: 00007ffd6aa8a888
[  423.506796][T17810]  </TASK>
[  423.510275][T17810] Kernel Offset: disabled
[  423.514581][T17810] Rebooting in 86400 seconds..